|
@@ -103,9 +103,10 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
|
|
|
// 过滤请求
|
|
|
.authorizeRequests()
|
|
|
// 对于app 开放页面,允许任意访问
|
|
|
- .antMatchers("/open/**").permitAll()
|
|
|
+ .antMatchers("/**/open-api/**").permitAll()
|
|
|
// 对于登录login 验证码captchaImage 允许匿名访问
|
|
|
.antMatchers("/login", "/login/noCode","/captchaImage","/login/studentpassword","/login/studentMobileCode","/login/studentMobile").anonymous()
|
|
|
+ //.antMatchers("/student/open/**").permitAll()
|
|
|
.antMatchers("/student/**").hasRole("STUDENT")
|
|
|
.antMatchers(
|
|
|
HttpMethod.GET,
|