gitee
/
spring-oauth-server
mirror of https://gitee.com/shengzhao/spring-oauth-server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

添加 必要的注释

pull/1/MERGE
monkeyk7 2017-09-10 20:24:05 +08:00
parent 28b34b8b85
commit 15e7fc1c21
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/resources/spring/security.xml
View File

@ -224,17 +224,24 @@
<intercept-url pattern="/oauth/**" access="ROLE_USER,ROLE_UNITY,ROLE_MOBILE"/> <intercept-url pattern="/oauth/**" access="ROLE_USER,ROLE_UNITY,ROLE_MOBILE"/>
<intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY"/> <intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
<!-- 配置表单验证 -->
<form-login authentication-failure-url="/login.jsp?authentication_error=1" default-target-url="/index.jsp" <form-login authentication-failure-url="/login.jsp?authentication_error=1" default-target-url="/index.jsp"
login-page="/login.jsp" login-processing-url="/login.do"/> login-page="/login.jsp" login-processing-url="/login.do"/>
<logout logout-success-url="/index.jsp" logout-url="/logout.do"/> <logout logout-success-url="/index.jsp" logout-url="/logout.do"/>
<access-denied-handler error-page="/login.jsp?authorization_error=2"/> <access-denied-handler error-page="/login.jsp?authorization_error=2"/>
<anonymous/> <anonymous/>
<!--CSRF 不启用; 实际 场景 推荐启用 -->
<csrf disabled="true"/> <csrf disabled="true"/>
</http> </http>
<authentication-manager alias="authenticationManager"> <authentication-manager alias="authenticationManager">
<authentication-provider user-service-ref="userService"> <authentication-provider user-service-ref="userService">
<!--
密码使用 MD5 加密 ; 实际使用时推荐使用 SHA-256, 并使用 salt
-->
<password-encoder hash="md5"/> <password-encoder hash="md5"/>
</authentication-provider> </authentication-provider>
</authentication-manager> </authentication-manager>