From d1cfd849c6a61800dcd86ffb45f80882ae20b2e7 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期一, 14 九月 2026 22:32:36 +0800
Subject: [PATCH] security: 接口鉴权 + 跨域收紧 + AI 数据脱敏 + 日志脱敏
---
traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java | 22 ++++++++++++++++++----
1 files changed, 18 insertions(+), 4 deletions(-)
diff --git a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
index 2a12ee3..6adee4c 100644
--- a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
+++ b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
@@ -1,5 +1,6 @@
package com.trafficaudit.security.config;
+import com.trafficaudit.security.filter.JwtAuthFilter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -8,10 +9,16 @@
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+import javax.annotation.Resource;
@Configuration
@EnableWebSecurity
public class SecurityConfig {
+
+ @Resource
+ private JwtAuthFilter jwtAuthFilter;
@Bean
public PasswordEncoder passwordEncoder() {
@@ -22,12 +29,19 @@
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.csrf().disable()
+ .cors().and()
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.authorizeRequests()
- .antMatchers("/api/**").permitAll()
- .antMatchers("/", "/index.html", "/js/**", "/css/**", "/fonts/**", "/img/**", "/favicon.ico").permitAll()
- .anyRequest().authenticated();
+ // 鐧诲綍鍓嶅繀椤诲彲鐢ㄧ殑鎺ュ彛
+ .antMatchers("/api/auth/login", "/api/auth/captcha", "/api/auth/captcha/verify",
+ "/api/auth/captcha-config").permitAll()
+ // 鍓嶇闈欐�佽祫婧�
+ .antMatchers("/", "/index.html", "/favicon.ico", "/js/**", "/css/**", "/fonts/**", "/img/**", "/static/**").permitAll()
+ .anyRequest().permitAll()
+ .and()
+ // 鎺ュ彛閴存潈鍦� JwtAuthFilter 鍐呭畬鎴愶紙杩斿洖 JSON 401锛�
+ .addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);
return http.build();
}
-}
+}
\ No newline at end of file
--
Gitblit v1.9.1