WebSecurityConfig 设置忽略拦截

这是官方文档给出的基本配置，默认会拦截所有路径

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.builders.WebSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
	@Override
	protected void configure(HttpSecurity http) throws Exception {
		http
		.authorizeRequests()
			.antMatchers("/", "/home").permitAll()
			.anyRequest().authenticated()
			.and()
		.formLogin()
			.loginPage("/login")
			.permitAll()
			.and()
		.logout()
			.permitAll();
	}

	@Bean
	@Override
	public UserDetailsService userDetailsService() {
		UserDetails user =
				User.withUsername("admin1").password("123456").roles("admin").build();
//			 User.withDefaultPasswordEncoder()
//				.username("user")
//				.password("password")
//				.roles("USER")
//				.build();

		return null;
	}

}

如果有一个请求路径是http://localhost:8125/test/method1不想被拦截，需要在这个类里边加上这一句

	@Override
	public void configure(WebSecurity web) throws Exception {
	    web.ignoring().antMatchers("/test/method1");
	}

也可以用正则表达式

web.ignoring().antMatchers("/test/method*");

这样会忽略所有路径

web.ignoring().antMatchers("/**");