From 73a05513ffaac43e440734aa8fffeea953563741 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期四, 17 九月 2026 14:14:44 +0800
Subject: [PATCH] chore(投资)：入库用户整理后的输入/模板/输出文件 + 回填口径确认（用户 2026-09-17 答复）
---
traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java | 21 ++++++++++++++++++---
1 files changed, 18 insertions(+), 3 deletions(-)
diff --git a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
index ea40ee9..6adee4c 100644
--- a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
+++ b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
@@ -1,5 +1,6 @@
package com.trafficaudit.security.config;
+import com.trafficaudit.security.filter.JwtAuthFilter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -8,10 +9,16 @@
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+import javax.annotation.Resource;
@Configuration
@EnableWebSecurity
public class SecurityConfig {
+
+ @Resource
+ private JwtAuthFilter jwtAuthFilter;
@Bean
public PasswordEncoder passwordEncoder() {
@@ -22,11 +29,19 @@
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.csrf().disable()
+ .cors().and()
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.authorizeRequests()
- .antMatchers("/api/**").permitAll()
- .anyRequest().authenticated();
+ // 鐧诲綍鍓嶅繀椤诲彲鐢ㄧ殑鎺ュ彛
+ .antMatchers("/api/auth/login", "/api/auth/captcha", "/api/auth/captcha/verify",
+ "/api/auth/captcha-config").permitAll()
+ // 鍓嶇闈欐�佽祫婧�
+ .antMatchers("/", "/index.html", "/favicon.ico", "/js/**", "/css/**", "/fonts/**", "/img/**", "/static/**").permitAll()
+ .anyRequest().permitAll()
+ .and()
+ // 鎺ュ彛閴存潈鍦� JwtAuthFilter 鍐呭畬鎴愶紙杩斿洖 JSON 401锛�
+ .addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);
return http.build();
}
-}
+}
\ No newline at end of file
--
Gitblit v1.9.1