|
|
@@ -2,18 +2,21 @@ package org.dromara.modules.monitor.config;
|
|
|
|
|
|
import de.codecentric.boot.admin.server.config.AdminServerProperties;
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
+import org.springframework.context.annotation.Configuration;
|
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
|
import org.springframework.security.web.SecurityFilterChain;
|
|
|
import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
|
|
|
|
|
|
/**
|
|
|
- * 监控权限配置
|
|
|
+ * admin 监控 安全配置
|
|
|
*
|
|
|
- * @author ruoyi
|
|
|
+ * @author Lion Li
|
|
|
*/
|
|
|
@EnableWebSecurity
|
|
|
+@Configuration
|
|
|
public class WebSecurityConfigurer {
|
|
|
+
|
|
|
private final String adminContextPath;
|
|
|
|
|
|
public WebSecurityConfigurer(AdminServerProperties adminServerProperties) {
|
|
|
@@ -27,22 +30,23 @@ public class WebSecurityConfigurer {
|
|
|
successHandler.setDefaultTargetUrl(adminContextPath + "/");
|
|
|
|
|
|
return httpSecurity
|
|
|
- .headers().frameOptions().disable()
|
|
|
- .and().authorizeHttpRequests()
|
|
|
- .requestMatchers(adminContextPath + "/assets/**"
|
|
|
- , adminContextPath + "/login"
|
|
|
- , adminContextPath + "/actuator/**"
|
|
|
- , adminContextPath + "/instances/**"
|
|
|
- ).permitAll()
|
|
|
- .anyRequest().authenticated()
|
|
|
- .and()
|
|
|
- .formLogin().loginPage(adminContextPath + "/login")
|
|
|
- .successHandler(successHandler).and()
|
|
|
- .logout().logoutUrl(adminContextPath + "/logout")
|
|
|
- .and()
|
|
|
- .httpBasic().and()
|
|
|
- .csrf()
|
|
|
- .disable()
|
|
|
- .build();
|
|
|
+ .headers().frameOptions().disable()
|
|
|
+ .and().authorizeHttpRequests()
|
|
|
+ .requestMatchers(adminContextPath + "/assets/**"
|
|
|
+ , adminContextPath + "/login"
|
|
|
+ , "/actuator"
|
|
|
+ , "/actuator/**"
|
|
|
+ ).permitAll()
|
|
|
+ .anyRequest().authenticated()
|
|
|
+ .and()
|
|
|
+ .formLogin().loginPage(adminContextPath + "/login")
|
|
|
+ .successHandler(successHandler).and()
|
|
|
+ .logout().logoutUrl(adminContextPath + "/logout")
|
|
|
+ .and()
|
|
|
+ .httpBasic().and()
|
|
|
+ .csrf()
|
|
|
+ .disable()
|
|
|
+ .build();
|
|
|
}
|
|
|
+
|
|
|
}
|