fix: 关闭 rememberMe

pull/20/head
Parker 3 years ago
parent f3195df4e6
commit 6092b3336c

@ -67,13 +67,11 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
.frameOptions().disable()
.and()
// 关闭csrf token认证不需要csrf防护
.csrf().disable();
.csrf().disable()
// 关闭Session会话管理器 JWT 不需要
http.sessionManagement().disable();
.sessionManagement().disable()
// 关闭记住我功能 JWT 不需要
http.rememberMe().disable();
.rememberMe().disable();
// 初始化 initAuthorizeRequests
this.initAuthorizeRequests(http);

@ -164,14 +164,11 @@ opsli:
credentials-expired: -1
# 排除过滤URL
url-exclusion:
# 未登陆状态下可以访问
anonymous:
permit-all:
- "/captcha"
- "/system/slipCount"
- "/system/login"
- "/system/login-by-code"
# 无限制
permit-all:
- "/api/*/common/public-key"
- "/api/*/common/email/create-code"
- "/api/*/common/mobile/create-code"

Loading…
Cancel
Save