| | |
|---|
| | | import org.springframework.stereotype.Component; |
|---|
| | | |
|---|
| | | import jakarta.servlet.ServletException; |
|---|
| | | import jakarta.servlet.DispatcherType; |
|---|
| | | import jakarta.servlet.http.HttpServletRequest; |
|---|
| | | import jakarta.servlet.http.HttpServletResponse; |
|---|
| | | import jakarta.annotation.Resource; |
|---|
| | |
|---|
| | | "/ws/**", |
|---|
| | | "/wcs/**", |
|---|
| | | "/monitor/**", |
|---|
| | | "/ai/mcp/**", |
|---|
| | | "/mcp/**", |
|---|
| | | "/ai/mcp", |
|---|
| | | "/mes/**" |
|---|
| | | }; |
|---|
| | | |
|---|
| | |
|---|
| | | public SecurityFilterChain securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http) |
|---|
| | | throws Exception { |
|---|
| | | http.authorizeHttpRequests(authorize -> authorize |
|---|
| | | .dispatcherTypeMatchers(DispatcherType.ASYNC, DispatcherType.ERROR).permitAll() |
|---|
| | | .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll() |
|---|
| | | .requestMatchers(HttpMethod.GET, "/file/**", "/captcha", "/").permitAll() |
|---|
| | | .requestMatchers(HttpMethod.GET, "/file/**", "/captcha", "/", "/config/public/project-logo", "/config/public/project-copyright").permitAll() |
|---|
| | | .requestMatchers(FILTER_PATH).permitAll() |
|---|
| | | .anyRequest().authenticated()) |
|---|
| | | .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) |
|---|
