|
@@ -2,6 +2,7 @@ package com.sqx.config;
|
|
|
|
|
|
|
|
import com.sqx.modules.sys.oauth2.OAuth2Filter;
|
|
import com.sqx.modules.sys.oauth2.OAuth2Filter;
|
|
|
import com.sqx.modules.sys.oauth2.OAuth2Realm;
|
|
import com.sqx.modules.sys.oauth2.OAuth2Realm;
|
|
|
|
|
+import icu.xuyijie.secureapi.model.SecureApiPropertiesConfig;
|
|
|
import org.apache.shiro.mgt.SecurityManager;
|
|
import org.apache.shiro.mgt.SecurityManager;
|
|
|
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
|
|
import org.apache.shiro.spring.LifecycleBeanPostProcessor;
|
|
|
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
|
|
import org.apache.shiro.spring.security.interceptor.AuthorizationAttributeSourceAdvisor;
|
|
@@ -31,19 +32,22 @@ public class ShiroConfig {
|
|
|
}
|
|
}
|
|
|
|
|
|
|
|
@Bean("shiroFilter")
|
|
@Bean("shiroFilter")
|
|
|
- public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager) {
|
|
|
|
|
|
|
+ public ShiroFilterFactoryBean shiroFilter(SecurityManager securityManager, SecureApiPropertiesConfig secureApiPropertiesConfig) {
|
|
|
ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean();
|
|
ShiroFilterFactoryBean shiroFilter = new ShiroFilterFactoryBean();
|
|
|
shiroFilter.setSecurityManager(securityManager);
|
|
shiroFilter.setSecurityManager(securityManager);
|
|
|
|
|
|
|
|
//oauth过滤
|
|
//oauth过滤
|
|
|
Map<String, Filter> filters = new HashMap<>();
|
|
Map<String, Filter> filters = new HashMap<>();
|
|
|
- filters.put("oauth2", new OAuth2Filter());
|
|
|
|
|
|
|
+ filters.put("oauth2", new OAuth2Filter(secureApiPropertiesConfig));
|
|
|
shiroFilter.setFilters(filters);
|
|
shiroFilter.setFilters(filters);
|
|
|
|
|
|
|
|
Map<String, String> filterMap = new LinkedHashMap<>();
|
|
Map<String, String> filterMap = new LinkedHashMap<>();
|
|
|
filterMap.put("/webjars/**", "anon");
|
|
filterMap.put("/webjars/**", "anon");
|
|
|
filterMap.put("/druid/**", "anon");
|
|
filterMap.put("/druid/**", "anon");
|
|
|
filterMap.put("/app/wxPay/notifyJsApi", "anon");
|
|
filterMap.put("/app/wxPay/notifyJsApi", "anon");
|
|
|
|
|
+
|
|
|
|
|
+ filterMap.put("/**/open/**", "anon");
|
|
|
|
|
+
|
|
|
filterMap.put("/app/wxPay/notifyMp", "anon");
|
|
filterMap.put("/app/wxPay/notifyMp", "anon");
|
|
|
filterMap.put("/app/wxPay/notify", "anon");
|
|
filterMap.put("/app/wxPay/notify", "anon");
|
|
|
filterMap.put("/app/aliPay/notifyApp", "anon");
|
|
filterMap.put("/app/aliPay/notifyApp", "anon");
|