package com.java214.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

/***
 *@author java214
 *@site www.java214.com
 *@company 一帆风顺网络科技有限公司
 *@create 2019-11-30 21:30
 *
 *
 *
 *
 */
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {


    @Override
    protected void configure(HttpSecurity http) throws Exception {
        //配置请求路径，允许跨域等，配置某些配置不需要认证
        http.csrf().disable().cors().disable().headers()
                .disable().authorizeRequests()
                .antMatchers("/", "/static/**","/admin/**","/layout/**","/shoot/**","/404")
                .permitAll().and().logout().permitAll();    //配置不需要身份认证的请求地址

    }
}