|
|
|
@ -103,6 +103,13 @@
|
|
|
|
|
<security:intercept-url pattern="/register/**" access="permitAll"/> |
|
|
|
|
</security:http> |
|
|
|
|
|
|
|
|
|
<security:http pattern="/resource/**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="stateless"> |
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" /> |
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" /> |
|
|
|
|
<security:expression-handler ref="oauthWebExpressionHandler" /> |
|
|
|
|
<security:intercept-url pattern="/resource/**" access="permitAll"/> |
|
|
|
|
</security:http> |
|
|
|
|
|
|
|
|
|
<security:http pattern="/userinfo**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="stateless"> |
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" /> |
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" /> |
|
|
|
|