@Override
protected void configure(HttpSecurity http) throws Exception {
//设置自定义的访问控制
http.authorizeRequests().accessDecisionManager(accessDecisionManager);
http
.authorizeRequests()
.antMatchers("/**").permitAll()
.and().formLogin().loginPage("/views/common/login.jsp").loginProcessingUrl("/securty_login").successHandler(loginSuccessHandler)
.usernameParameter("emailOrMobile").passwordParameter("passWord")
.and().csrf()
.and().exceptionHandling().accessDeniedPage("/sys/error");
http.logout().logoutUrl("/securyty_logout").logoutSuccessUrl("/views/common/index.jsp");
http.headers().frameOptions().disable();
}
@Override
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes)
throws AccessDeniedException, InsufficientAuthenticationException {
FilterInvocation filterInvocation = (FilterInvocation) object;
String url = filterInvocation.getRequestUrl();
//如果没有配置访问权限，则不通过
if( configAttributes == null) {
throw new AccessDeniedException("未配置访问权限");
}
//直接放行的资源
if(this.isCommonResource(url)){
return;
}
otherCode…………
}
get的话就正常：
post请求404错误：
到自定义的控制器的时候，url请求直接变成了404页面：
不知道在此之前哪里拦截了post请求，有知情的大佬还望指教！！
