最近配置Spring Security,跟着博客上的demo学习了一下,但是自定义AbstractSecurityInterceptor这个类后,所有的URL都会被过滤进去,在里面进行判断,即使配置了web.ignoring()或者antMatchers().permitAll()都没效果,有什么办法解决这个问题呢
@Override
protected void configure(HttpSecurity http) throws Exception {
// super.configure(http);
http
.authorizeRequests()
.antMatchers("/", "/test1", "/test2", "/login", "/register/**", "/webjars/**").permitAll()
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login")
.permitAll()
// .failureUrl("login?error=true")
.successHandler(new MySuccessHandler())
.defaultSuccessUrl("/admin/index")
.and()
.logout()
.logoutSuccessUrl("/")
.and()
// .csrf().disable()
.rememberMe()
;
http.addFilterAfter(myFilterSecurityInterceptor, FilterSecurityInterceptor.class);
}