|
@@ -26,7 +26,16 @@ public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
|
|
|
@Override
|
|
|
public void configure(HttpSecurity http) throws Exception {
|
|
|
http.csrf().disable().exceptionHandling().accessDeniedHandler(baseAccessDeniedHandler).authenticationEntryPoint(baseAuthenticationEntryPoint).and()
|
|
|
- .authorizeRequests().antMatchers("/task/**", "/user/updatePassword", "/user/noAuth/queryUserByPhone", "/user/queryUserByPhone", "/user/add", "/user/queryUserById/*").hasIpAddress("0.0.0.0/0")
|
|
|
+ .authorizeRequests().antMatchers(
|
|
|
+ "/task/**",
|
|
|
+ "/user/updatePassword",
|
|
|
+ "/user/noAuth/queryUserByPhone",
|
|
|
+ "/user/queryUserByPhone",
|
|
|
+ "/user/add",
|
|
|
+ "/user/updatePasswordByOldPassword",
|
|
|
+ "/user/updatePhone",
|
|
|
+ "/user/realNameAuth",
|
|
|
+ "/user/queryUserById/*").hasIpAddress("0.0.0.0/0")
|
|
|
.anyRequest().authenticated().and().httpBasic();
|
|
|
}
|
|
|
|