token放在get请求参数中

fengxiang

2018-02-05 baaff76ba638ac37f5b1dcffb27ba9f5a9fff937

 src/main/java/com/moral/security/config/WebSecurityConfig.java

@@ -36,9 +36,10 @@
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    public static final String AUTHENTICATION_HEADER_NAME = "X-Authorization";
    public static final String AUTHENTICATION_PARAM_NAME = "_token";
    public static final String AUTHENTICATION_URL = "/auth/login";
    public static final String REFRESH_TOKEN_URL = "/auth/token";
    public static final String API_ROOT_URL = "/*/**";
    public static final String API_ROOT_URL = "/**/*";

    @Autowired
    private RestAuthenticationEntryPoint authenticationEntryPoint;
@@ -90,7 +91,8 @@
    protected void configure(HttpSecurity http) throws Exception {
        List<String> permitAllEndpointList = Arrays.asList(
            AUTHENTICATION_URL,
            REFRESH_TOKEN_URL
            REFRESH_TOKEN_URL,
            "/screen/**"
        );

        http