|
@@ -1,12 +1,15 @@
|
|
|
package com.jd.lightapplication.config;
|
|
|
|
|
|
import com.jd.lightapplication.security.*;
|
|
|
+import com.jd.lightapplication.service.SysUserService;
|
|
|
+import com.jd.lightapplication.utils.JwtUtils;
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
|
+import org.springframework.security.config.annotation.web.builders.WebSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
@@ -27,6 +30,12 @@ import org.springframework.security.web.authentication.UsernamePasswordAuthentic
|
|
|
public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
|
|
|
@Autowired
|
|
|
+ JwtUtils jwtUtils;
|
|
|
+
|
|
|
+ @Autowired
|
|
|
+ SysUserService sysUserService;
|
|
|
+
|
|
|
+ @Autowired
|
|
|
LoginFailureHandler loginFailureHandler;
|
|
|
|
|
|
@Autowired
|
|
@@ -38,9 +47,8 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
@Autowired
|
|
|
private SmsCodeAuthenticationSecurityConfig smsCodeAuthenticationSecurityConfig;
|
|
|
|
|
|
- @Bean
|
|
|
JwtAuthenticationFilter jwtAuthenticationFilter() throws Exception {
|
|
|
- JwtAuthenticationFilter jwtAuthenticationFilter = new JwtAuthenticationFilter(authenticationManager());
|
|
|
+ JwtAuthenticationFilter jwtAuthenticationFilter = new JwtAuthenticationFilter(authenticationManager(), jwtUtils, userDetailService, sysUserService);
|
|
|
return jwtAuthenticationFilter;
|
|
|
}
|
|
|
|
|
@@ -114,11 +122,14 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.and()
|
|
|
.addFilter(jwtAuthenticationFilter())
|
|
|
.addFilterBefore(captchaFilter, UsernamePasswordAuthenticationFilter.class)
|
|
|
- .addFilterBefore(mobileLoginFilter,UsernamePasswordAuthenticationFilter.class)
|
|
|
- .apply(smsCodeAuthenticationSecurityConfig)
|
|
|
+ .addFilterBefore(mobileLoginFilter, UsernamePasswordAuthenticationFilter.class)
|
|
|
+ .apply(smsCodeAuthenticationSecurityConfig);
|
|
|
|
|
|
- ;
|
|
|
+ }
|
|
|
|
|
|
+ @Override
|
|
|
+ public void configure(WebSecurity web) throws Exception {
|
|
|
+ web.ignoring().antMatchers("/captcha");
|
|
|
}
|
|
|
|
|
|
@Override
|