291 lines
18 KiB
Java
291 lines
18 KiB
Java
package com.zhgd.xmgl.security;
|
||
|
||
import org.springframework.beans.factory.annotation.Autowired;
|
||
import org.springframework.beans.factory.annotation.Qualifier;
|
||
import org.springframework.beans.factory.annotation.Value;
|
||
import org.springframework.context.annotation.Bean;
|
||
import org.springframework.context.annotation.Configuration;
|
||
import org.springframework.http.HttpMethod;
|
||
import org.springframework.security.authentication.AuthenticationManager;
|
||
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
||
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
||
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
||
import org.springframework.security.config.annotation.web.builders.WebSecurity;
|
||
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
||
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
||
import org.springframework.security.config.http.SessionCreationPolicy;
|
||
import org.springframework.security.core.userdetails.UserDetailsService;
|
||
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
||
import org.springframework.security.crypto.password.PasswordEncoder;
|
||
import org.springframework.security.web.access.AccessDeniedHandler;
|
||
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
||
|
||
/**
|
||
* @program: devManage
|
||
* @description:
|
||
* @author: Mr.Peng
|
||
* @create: 2019-09-24 11:35
|
||
**/
|
||
@Configuration
|
||
@EnableWebSecurity
|
||
@EnableGlobalMethodSecurity(prePostEnabled = true)
|
||
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
||
|
||
private final JwtAuthenticationEntryPoint unauthorizedHandler;
|
||
|
||
private final AccessDeniedHandler accessDeniedHandler;
|
||
|
||
private final UserDetailsService CustomUserDetailsService;
|
||
|
||
private final JwtTokenFilter authenticationTokenFilter;
|
||
|
||
@Value("${security.enable}")
|
||
private boolean securityEnable;
|
||
|
||
@Autowired
|
||
public WebSecurityConfig(JwtAuthenticationEntryPoint unauthorizedHandler,
|
||
@Qualifier("RestAuthenticationAccessDeniedHandler") AccessDeniedHandler accessDeniedHandler,
|
||
@Qualifier("CustomUserDetailsService") UserDetailsService CustomUserDetailsService,
|
||
JwtTokenFilter authenticationTokenFilter) {
|
||
this.unauthorizedHandler = unauthorizedHandler;
|
||
this.accessDeniedHandler = accessDeniedHandler;
|
||
this.CustomUserDetailsService = CustomUserDetailsService;
|
||
this.authenticationTokenFilter = authenticationTokenFilter;
|
||
}
|
||
|
||
@Autowired
|
||
public void configureAuthentication(AuthenticationManagerBuilder authenticationManagerBuilder) throws Exception {
|
||
authenticationManagerBuilder
|
||
// 设置UserDetailsService
|
||
.userDetailsService(this.CustomUserDetailsService)
|
||
// 使用BCrypt进行密码的hash
|
||
.passwordEncoder(passwordEncoder());
|
||
}
|
||
|
||
@Override
|
||
protected void configure(HttpSecurity http) throws Exception {
|
||
http.headers().frameOptions().disable();
|
||
if (securityEnable) {
|
||
http.authorizeRequests()
|
||
//请求路径允许访问
|
||
.antMatchers("/xmgl/base/**").permitAll()
|
||
.antMatchers("/zw/base/**").permitAll()
|
||
.antMatchers("/zw/Index/**").permitAll()
|
||
.antMatchers("/xmgl/lifterAlarm/queryLifterTowerPageList").permitAll()
|
||
.antMatchers("/xmgl/aiAnalyseHardWareAlarmRecord/selectPageList").permitAll()
|
||
.antMatchers("/xmgl/videoItem/selectProjectVideoList").permitAll()
|
||
.antMatchers("/xmgl/tower/list").permitAll()
|
||
.antMatchers("/xmgl/workerSafeEducation/list").permitAll()
|
||
// .antMatchers("/").permitAll()
|
||
//.antMatchers("/xmgl/base/login").permitAll()
|
||
//.antMatchers("/xmgl/base/projectLogin").permitAll()
|
||
//.antMatchers("/xmgl/base/companyLogin").permitAll()
|
||
//.antMatchers("/api/**").permitAll()
|
||
.antMatchers("/xmgl/callback/**").permitAll()
|
||
.antMatchers("/xmgl/standardCurrentData/addCurrentData").permitAll()
|
||
.antMatchers("/xmgl/ammeterData/**").permitAll()
|
||
.antMatchers("/xmgl/planApi/**").permitAll()
|
||
.antMatchers("/xmgl/project/saveZwProject").permitAll()
|
||
.antMatchers("/xmgl/workerWagesPayment/salaryPdf").permitAll()
|
||
.antMatchers("/xmgl/workerWagesPayment/attendancePdf").permitAll()
|
||
.antMatchers("/xmgl/workerWagesPayment/excelProjectWages").permitAll()
|
||
.antMatchers("/api/v1/events").permitAll()
|
||
.antMatchers("/xmgl/projectApi/**").permitAll()
|
||
.antMatchers("/xmgl/projectOperationsAnalysis/**").permitAll()
|
||
.antMatchers("/xmgl/computerAuth/**").permitAll()
|
||
.antMatchers("/xmgl/push/**").permitAll()
|
||
.antMatchers("/xmgl/wirelessEducationQuestionSubject/getDeviceRandomEducationQuestion").permitAll()
|
||
.antMatchers("/xmgl/wirelessEducationQuestionAnswer/add").permitAll()
|
||
.antMatchers("/xmgl/safeEducationQuestionAnswer/getAnswerWorkerInfo").permitAll()
|
||
.antMatchers("/xmgl/safeEducationQuestion/selectSafeEducationQuestionInfo").permitAll()
|
||
.antMatchers("/xmgl/safeEducationQuestion/exportExcelWorkerEducation").permitAll()
|
||
.antMatchers("/xmgl/gantryCraneApi/**").permitAll()
|
||
.antMatchers("/xmgl/towerViolation/add").permitAll()
|
||
.antMatchers("/xmgl/ufaceDev/retryYFAttendance").permitAll()
|
||
.antMatchers("/xmgl/ufaceDev/retryNewJxJAttendance").permitAll()
|
||
.antMatchers("/xmgl/projectCloseManageAnalysis/exporExcelAnalysisWorkerInfoList").permitAll()
|
||
.antMatchers("/xmgl/projectCloseManageAnalysis/exporExcelProjectCloseManageAnalysis").permitAll()
|
||
.antMatchers("/xmgl/projectCloseManageAnalysis/exporExcelEnterpriseCodeWorkerInfoList").permitAll()
|
||
.antMatchers("/xmgl/projectCloseManageAnalysis/exporExcelAnalysisAllWorkerInfoList").permitAll()
|
||
.antMatchers("/xmgl/projectEnterpriseWorkerStatistics/exporExcelProjectEnterpriseWorkerStatistics").permitAll()
|
||
.antMatchers("/xmgl/projectEnterpriseWorkerStatistics/exporExcelDayEnterpriseWorkerStatisticsDetail").permitAll()
|
||
.antMatchers("/xmgl/inspectTableLibrary/downloadExcelInspectTable").permitAll()
|
||
.antMatchers("/xmgl/inspectTableLibrary/uploadExcelInspectTable").permitAll()
|
||
.antMatchers("/xmgl/towerCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/towerCurrentData/saveTowerData").permitAll()
|
||
.antMatchers("/xmgl/inspectHiddenDangerLibrary/uploadExcelHiddenDangerLibrary").permitAll()
|
||
.antMatchers("/xmgl/inspectHiddenDangerLibrary/downloadExcelHiddenDangerLibrary").permitAll()
|
||
.antMatchers("/xmgl/tower/updateTowerInfo").permitAll()
|
||
.antMatchers("/xmgl/lifterCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/visitorManageRecord/add").permitAll()
|
||
.antMatchers("/xmgl/lifterWorkCycle/add").permitAll()
|
||
.antMatchers("/xmgl/waterCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/lifterAlarm/add").permitAll()
|
||
.antMatchers("/xmgl/lifterCurrentData/saveLifterData").permitAll()
|
||
.antMatchers("/xmgl/safeeducation/save/record").permitAll()
|
||
.antMatchers("/xmgl/towerAlarm/add").permitAll()
|
||
.antMatchers("/xmgl/workerImage/addWorkerImageData").permitAll()
|
||
.antMatchers("/xmgl/electricalData/add").permitAll()
|
||
.antMatchers("/xmgl/workerAttendance/downloadExcelAttendance").permitAll()
|
||
.antMatchers("/xmgl/towerNut/saveNutData").permitAll()
|
||
.antMatchers("/xmgl/ufaceDev/devHeartBeat").permitAll()
|
||
.antMatchers("/xmgl/concreteMonitorCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/dischargingPlatformCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/workerMonthAttendanceStatistics/getAfreshMonthAttendanceStatistics").permitAll()
|
||
.antMatchers("/xmgl/carWashCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/carWashCurrentData/addCarAlarm").permitAll()
|
||
.antMatchers("/xmgl/towerWorkCycle/add").permitAll()
|
||
.antMatchers("/xmgl/highFormworkMeasureCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/carVideoAirtightData/saveCarVideoAnalyAirtightResult").permitAll()
|
||
.antMatchers("/xmgl/carVideoWashData/saveCarVideoAnalyWashResult").permitAll()
|
||
.antMatchers("/xmgl/safeEducationQuestionAnswer/add").permitAll()
|
||
.antMatchers("/xmgl/elevatorFaultRecord/add").permitAll()
|
||
.antMatchers("/xmgl/highFormworkDeviceCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/appVersion/getAppVersion").permitAll()
|
||
.antMatchers("/xmgl/waterData/**").permitAll()
|
||
.antMatchers("/xmgl/standardCurrentData/add").permitAll()
|
||
.antMatchers("/xmgl/standardCurrentData/exportExcelStandardCurrentData").permitAll()
|
||
.antMatchers("/xmgl/standardDevRealTimeData/add").permitAll()
|
||
.antMatchers("/xmgl/standardCurrentData/saveStandardCurrentData").permitAll()
|
||
.antMatchers("/xmgl/elevatorRealTimeData/add").permitAll()
|
||
.antMatchers("/xmgl/systemLogoConfig/selectSystemLogoConfig").permitAll()
|
||
.antMatchers("/xmgl/positionRealData/addPositionRealData").permitAll()
|
||
.antMatchers("/xmgl/carPassRecord/saveCarPassRecord").permitAll()
|
||
.antMatchers("/xmgl/dustNoiseData/add").permitAll()
|
||
.antMatchers("/xmgl/company/selectComapnyByNameList").permitAll()
|
||
.antMatchers("/xmgl/company/selectComapnyLayerList").permitAll()
|
||
.antMatchers("/xmgl/videoItem/getVideoUrl").permitAll()
|
||
.antMatchers("/xmgl/project/getVideoSerialNumber").permitAll()
|
||
.antMatchers("/xmgl/ufaceCallback/**").permitAll()
|
||
.antMatchers("/xmgl/workerCallback/**").permitAll()
|
||
.antMatchers("/xmgl/lockCallback/**").permitAll()
|
||
.antMatchers("/xmgl/api/**").permitAll()
|
||
.antMatchers("/xmgl/visitorManageRecord/addVisitorRecord").permitAll()
|
||
.antMatchers("/xmgl/itbgp/api/**").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationSensorType/selectDeepExcavationSensorTypeList").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationCurrentData/selectPage").permitAll()
|
||
.antMatchers("/xmgl/workerApi/**").permitAll()
|
||
.antMatchers("/xmgl/download/**").permitAll()
|
||
.antMatchers("/xmgl/towerCurrentData/**").permitAll()
|
||
.antMatchers("/xmgl/lifterCurrentData/**").permitAll()
|
||
.antMatchers("/xmgl/hiddenDangerInspectRecord/**").permitAll()
|
||
.antMatchers("/xmgl/inspectionRecord/**").permitAll()
|
||
.antMatchers("/xmgl/towerAlarm/**").permitAll()
|
||
.antMatchers("/xmgl/lifterAlarm/selectPageInfo").permitAll()
|
||
.antMatchers("/xmgl/docking/**").permitAll()
|
||
.antMatchers("/xmgl/dev/devException").permitAll()
|
||
.antMatchers("/users/signup").permitAll().antMatchers("/upload/**").permitAll()
|
||
.antMatchers("/firm/**").permitAll()
|
||
.antMatchers("/filetransfer/**").permitAll()
|
||
.antMatchers("/image/**").permitAll()
|
||
.antMatchers("/flowable/**").permitAll()
|
||
.antMatchers("/h2-console/**/**").permitAll()
|
||
.antMatchers("/xmgl/workerInfo/selectPersonList").permitAll()
|
||
.antMatchers("/xmgl/lifterViolation/add").permitAll()
|
||
.antMatchers("/xmgl/lifterViolation/selectPage").permitAll()
|
||
.antMatchers("/xmgl/projectJqmDev/list").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationSensor/selectPage").permitAll()
|
||
.antMatchers("/xmgl/lifter/getRelatedInfo").permitAll()
|
||
.antMatchers("/xmgl/tower/getRelatedInfo").permitAll()
|
||
.antMatchers("/xmgl/workerInfo/selectPersonListZW").permitAll()
|
||
.antMatchers("/xmgl/checkingPointInfo/selectPage").permitAll()
|
||
.antMatchers("/xmgl/checkingPointInfo/selectAllList").permitAll()
|
||
.antMatchers("/xmgl/checkingPointInfo/add").permitAll()
|
||
.antMatchers("/xmgl/dev/**").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationCurrentData/exportData").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationCurrentData/zwExportData").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationMeasurePoint/selectDeepExcavationAllMeasurePointList").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationMonitorType/list").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationSensor/getSensorListByMeasurePointNumber").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationCurrentData/selectDeepExcavationCurrentDataList").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationEngineering/selectDeepExcavationList").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationPlaneFigure/selectList").permitAll()
|
||
.antMatchers("/xmgl/deepExcavationPlaneFigureCoordinate/list").permitAll()
|
||
.antMatchers("/xmgl/videoItem/viListAndTenAlarm").permitAll()
|
||
.antMatchers("/xmgl/fpdcd/lrk/add").permitAll()
|
||
.antMatchers("/xmgl/rundeGroup/getSumAndOnlineNumber").permitAll()
|
||
.antMatchers("/license/**").permitAll()
|
||
.antMatchers("/api/main/alarm").permitAll()
|
||
.antMatchers("/zhgd/**").permitAll()
|
||
.antMatchers("/xmgl/lifter/list").permitAll()
|
||
.antMatchers("/xmgl/progressTask/downloadTemplate").permitAll() //进度管理系统-分布分项工程管理-下载模板
|
||
.antMatchers(HttpMethod.OPTIONS, "/**").anonymous()
|
||
.anyRequest().authenticated() // 剩下所有的验证都需要验证
|
||
.and()
|
||
// 禁用 Spring Security 自带的跨域处理
|
||
.csrf().disable()
|
||
// 授权异常
|
||
.exceptionHandling()
|
||
.authenticationEntryPoint(unauthorizedHandler)
|
||
//.authenticationEntryPoint()
|
||
.accessDeniedHandler(accessDeniedHandler)
|
||
.and()
|
||
// 定制我们自己的 session 策略：调整为让 Spring Security 不创建和使用 session
|
||
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
|
||
//以下这句就可以控制单个用户只能创建一个session，也就只能在服务器登录一次
|
||
//http.sessionManagement().maximumSessions(1).expiredUrl("/login");
|
||
|
||
// Apply JWT
|
||
//http.apply(new JwtTokenFilterConfigurer(jwtTokenProvider));
|
||
// 添加JWT filter
|
||
http.addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
|
||
|
||
} else {
|
||
http.csrf().disable()
|
||
.authorizeRequests()
|
||
.anyRequest().permitAll()
|
||
.and().logout().permitAll();
|
||
}
|
||
}
|
||
|
||
public void getStartDate() {
|
||
// 二分查找
|
||
|
||
}
|
||
|
||
@Override
|
||
public void configure(WebSecurity web) throws Exception {
|
||
// Allow swagger to be accessed without authentication
|
||
web.ignoring()
|
||
//忽略任何以什么开头的请求
|
||
.antMatchers("/v2/api-docs")
|
||
.antMatchers("/swagger-resources/**")
|
||
.antMatchers("/swagger-ui.html")
|
||
.antMatchers("/configuration/**")
|
||
.antMatchers("/webjars/**")
|
||
.antMatchers("/public")
|
||
.antMatchers("/doc.html")
|
||
.antMatchers("/static/document/README.md")
|
||
.antMatchers("/index.html")
|
||
.antMatchers("/equipmentCenter.html")
|
||
.antMatchers("/equipmentCenter.html/**")
|
||
.antMatchers("/js/**")
|
||
.antMatchers("/img/**")
|
||
.antMatchers("/fonts/**")
|
||
.antMatchers("/css/**")
|
||
.antMatchers("/document/**")
|
||
.antMatchers("/doc/**")
|
||
.antMatchers("/video/**")
|
||
.antMatchers("/animate/**")
|
||
.antMatchers("/static/**")
|
||
.antMatchers("/flowable/**")
|
||
.antMatchers("/favicon.ico")
|
||
.antMatchers("/favicon.png")
|
||
// Un-secure H2 Database (for testing purposes, H2 console shouldn't be unprotected in production)
|
||
.and()
|
||
.ignoring()
|
||
.antMatchers("/h2-console/**/**");
|
||
}
|
||
|
||
@Bean
|
||
public PasswordEncoder passwordEncoder() {
|
||
return new BCryptPasswordEncoder(12);
|
||
}
|
||
|
||
@Bean
|
||
@Override
|
||
public AuthenticationManager authenticationManagerBean() throws Exception {
|
||
return super.authenticationManagerBean();
|
||
}
|
||
}
|