|
|
@ -34,6 +34,8 @@ import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
|
|
import org.springframework.security.web.firewall.HttpFirewall;
|
|
|
import org.springframework.security.web.firewall.StrictHttpFirewall;
|
|
|
import org.springframework.web.cors.CorsConfiguration;
|
|
|
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
|
|
|
import org.springframework.web.filter.CorsFilter;
|
|
|
@ -76,6 +78,18 @@ public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
return new CorsFilter(source);
|
|
|
}
|
|
|
|
|
|
/**
|
|
|
* 配置地址栏不能识别 // 的情况
|
|
|
* @return
|
|
|
*/
|
|
|
@Bean
|
|
|
public HttpFirewall allowUrlEncodedSlashHttpFirewall() {
|
|
|
StrictHttpFirewall firewall = new StrictHttpFirewall();
|
|
|
//此处可添加别的规则,目前只设置 允许双 //
|
|
|
firewall.setAllowUrlEncodedDoubleSlash(true);
|
|
|
return firewall;
|
|
|
}
|
|
|
|
|
|
@Override
|
|
|
protected void configure(HttpSecurity httpSecurity) throws Exception {
|
|
|
|
