|
|
|
@ -103,6 +103,13 @@
|
|
|
|
|
<security:intercept-url pattern="/register/**" access="permitAll"/>
|
|
|
|
|
</security:http>
|
|
|
|
|
|
|
|
|
|
<security:http pattern="/resource/**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="stateless">
|
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" />
|
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" />
|
|
|
|
|
<security:expression-handler ref="oauthWebExpressionHandler" />
|
|
|
|
|
<security:intercept-url pattern="/resource/**" access="permitAll"/>
|
|
|
|
|
</security:http>
|
|
|
|
|
|
|
|
|
|
<security:http pattern="/userinfo**" use-expressions="true" entry-point-ref="oauthAuthenticationEntryPoint" create-session="stateless">
|
|
|
|
|
<security:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER" />
|
|
|
|
|
<security:custom-filter ref="corsFilter" after="SECURITY_CONTEXT_FILTER" />
|
|
|
|
|