| 
					
				 | 
			
			
				@ -1,6 +1,7 @@ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				package com.yihu.ehr.iot.security.config; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				import com.yihu.ehr.iot.security.core.*; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				import com.yihu.ehr.iot.security.entryPoint.LoginEntryPoint; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				import org.springframework.beans.factory.annotation.Autowired; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				import org.springframework.beans.factory.annotation.Value; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				import org.springframework.context.annotation.Bean; 
			 | 
		
	
	
		
			
				| 
					
				 | 
			
			
				@ -38,7 +39,8 @@ public class EhrWebSecurityConfiguration extends WebSecurityConfigurerAdapter { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    //private EhrWebAccessDecisionManager ehrWebAccessDecisionManager; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    @Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    private SessionRegistry sessionRegistry; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    @Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    private LoginEntryPoint loginEntryPoint; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    @Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    private EhrWebContextLogoutHandler ehrWebContextLogoutHandler; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 
			 | 
		
	
	
		
			
				| 
					
				 | 
			
			
				@ -75,6 +77,7 @@ public class EhrWebSecurityConfiguration extends WebSecurityConfigurerAdapter { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .antMatchers("/front/views/**").hasRole("USER") 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .antMatchers("/**").hasRole("USER") 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .and().formLogin().loginPage("/login") 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .and().exceptionHandling().authenticationEntryPoint(loginEntryPoint) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .and().logout().addLogoutHandler(ehrWebContextLogoutHandler).logoutUrl("/logout").logoutSuccessUrl("/login") 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .and().headers().frameOptions().disable() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				                .and().csrf().disable(); 
			 | 
		
	
	
		
			
				| 
					
				 | 
			
			
				@ -111,6 +114,12 @@ public class EhrWebSecurityConfiguration extends WebSecurityConfigurerAdapter { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    EhrWebContextLogoutHandler ehrWebContextLogoutHandler(){ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				        return new EhrWebContextLogoutHandler(); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    @Bean 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    LoginEntryPoint loginEntryPoint(){ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				        return new LoginEntryPoint("/login"); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    } 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    /** 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    @Bean 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				    EhrWebAccessDecisionManager ehrWebAccessDecisionManager() { 
			 |