工业级后台API v2
blame | history | patch | commit | commitdiff | ignore whitespace
fengxiang
2017-12-22 01329695ebf6eea6576d76825181b2f3833297e8 
 src/main/java/com/moral/security/WebSecurityConfiguration.java


@@ -20,6 +20,7 @@


import org.springframework.security.oauth2.provider.approval.TokenStoreUserApprovalHandler;


import org.springframework.security.oauth2.provider.request.DefaultOAuth2RequestFactory;


import org.springframework.security.oauth2.provider.token.TokenStore;


import org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore;


import org.springframework.security.oauth2.provider.token.store.redis.RedisTokenStore;




@Configuration


@@ -48,10 +49,10 @@




    @Override


    protected void configure(HttpSecurity http) throws Exception {


      http


      .anonymous().disable()


        .authorizeRequests()


        .antMatchers("/oauth/token").permitAll();


      http.csrf().disable(); //TODO 暂时关闭CSRF


      http.anonymous().disable()


            .authorizeRequests()


            .antMatchers("/oauth/token").permitAll();


    }




    @Override


@@ -63,8 +64,8 @@




   @Bean


   public TokenStore tokenStore() {


      //return new InMemoryTokenStore();


      return new RedisTokenStore(redisConnection);


      return new InMemoryTokenStore();


      //return new RedisTokenStore(redisConnection);


   }




   @Bean