login

Author: forsrc

forsrc-springboot-gwt-authorization/src/main/java/com/forsrc/boot/authorization/config/LoginConfig.java

@@ -33,24 +33,19 @@ protected void configure(HttpSecurity http) throws Exception {
                     .permitAll()
                 .and()
                     .requestMatchers()
-                    .antMatchers("/login", "/logout", "/oauth/authorize", "/oauth/confirm_access", "/test")
+                    .antMatchers("/", "/login", "/logout", "/oauth/authorize", "/oauth/confirm_access", "/test")
                 .and()
-                    .antMatcher("/**")
                     .authorizeRequests()
-                    .antMatchers("/oauth/token_key")
+                    .antMatchers("/test", "/oauth/token")
                     .permitAll()
-                 .and()
-                    .antMatcher("/**")
-                    .authorizeRequests()
-                    .anyRequest()
-                    .authenticated()
                 .and()
                     .csrf()
                     .ignoringAntMatchers("/test", "/oauth/token")
                     .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
                 .and()
                     .authorizeRequests()
-                    .anyRequest().authenticated();
+                    .anyRequest()
+                    .authenticated();
                     ;
     }
 
@@ -75,4 +70,4 @@ public void commence(HttpServletRequest request, HttpServletResponse response,
             }
         };
     }
-}
+}

forsrc-springboot-gwt-authorization/src/main/java/com/forsrc/boot/authorization/config/OAuth2AuthorizationConfig.java

@@ -46,6 +46,8 @@ public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws E
     @Override
     public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
         security.tokenKeyAccess(authorizationServerProperties.getTokenKeyAccess());
+        //security.tokenKeyAccess("permitAll()")
+            //.checkTokenAccess("isAuthenticated()");
     }
 
     @Bean