Spring Security permitAll()不允许匿名访问

2022-08-14 14:48:51

修改前

	http.addFilterBefore(muiltpartFilter, ChannelProcessingFilter.class).addFilterBefore(cf, ChannelProcessingFilter.class).authorizeRequests().anyRequest().authenticated().and().authorizeRequests().antMatchers("/ping**").permitAll().and().formLogin().loginPage("/login").permitAll().and().logout().logoutUrl("/logout").logoutSuccessUrl("/login");

修改后

	http.addFilterBefore(muiltpartFilter, ChannelProcessingFilter.class).addFilterBefore(cf, ChannelProcessingFilter.class).authorizeRequests().antMatchers("/ping**").permitAll().and().formLogin().loginPage("/login").permitAll().and().authorizeRequests().anyRequest().authenticated().and().logout().logoutUrl("/logout").logoutSuccessUrl("/login");
  1. permitAll() 顺序很重要，如同在XML 配置中，即把authorizeRequests().anyRequest().authenticate 放到最后
  • 作者：老爸是程序员
  • 原文链接：https://blog.csdn.net/king101125s/article/details/104215225
    更新时间：2022-08-14 14:48:51