Spring Boot中的全局方法安全性

Z时代
2024-01-10
分类：问答

尝试在Spring Boot" title="Spring Boot">Spring Boot应用程序中启用全局方法安全性时遇到一些问题。我或多或少具有以下配置：

@ComponentScan
@Configuration
@EnableAutoConfiguration
@EnableConfigurationProperties
public class Main extends SpringBootServletInitializer {
    public static void main(String[] args) throws Exception {
        SpringApplication app = new SpringApplication(Main.class);
        app.setShowBanner(false);
        ApplicationContext context = app.run(args);
    }
    @Override
    protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
        return application.sources(Main.class);
    }
}
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(securedEnabled = true, proxyTargetClass = true)
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        ...
    }
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        ...
    }
}
@Controller
public class SampleController {
    @RequestMapping("/api/hello")
    @ResponseBody
    String hello() {
        return "Hello!";
    }
    @Secured(SecurityGrant.WRITE_PROJECT)
    @RequestMapping("/api/bye")
    @ResponseBody
    String bye() {
        return "Bye!";
    }
}