|
@@ -111,8 +111,11 @@ public class SecurityConfig
|
|
|
.authorizeHttpRequests((requests) -> {
|
|
|
permitAllUrl.getUrls().forEach(url -> requests.antMatchers(url).permitAll());
|
|
|
// 对于登录login 注册register 验证码captchaImage 允许匿名访问
|
|
|
- requests.antMatchers("/login","/loginWeb", "/register", "/captchaImage","/system/dict/**,",
|
|
|
+ requests.antMatchers("/login","/loginWeb", "/register", "/captchaImage","/system/dict/**,","/websocket/**",
|
|
|
"/core/users/orders/payNotify","/core/users/orders/refundNotify").permitAll()
|
|
|
+ //微信小程序需要提供部分预览功能
|
|
|
+ .antMatchers("/core/volunteer/info/**","/web/core/slideshow/**","/core/business/management/**",
|
|
|
+ "/core/volunteer/work-date/**","/utils/common/region/**").permitAll()
|
|
|
// 静态资源,可匿名访问
|
|
|
.antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**").permitAll()
|
|
|
.antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()
|