Spring Security antMatcher表达式不适用于路径变量

Question

I need to provide certain role for accessing a URL in the following format:

/connector/{programId}/order/{anything here}

Where programId is an integer value so I'd tried the following and it doesn't work at all.

.antMatchers('/connector/{programId:\\d+}/order/**').access("hasRole('CONNECTOR')")

But when I used ** instead of the programId part it's working well. But how can I make it work with pathVariable (which is always an integer).

Answer 1

您应该使用RegexRequestMatcher而不是AntPathRequestMatcher 。

.regexMatchers("/connector/(\\d+)/order/.*").access("hasRole('CONNECTOR')")

Answer 2

我正在使用： .regexMatchers("/connector/(\\\\d+)/order/.*").access("hasRole('CONNECTOR')")但是服务器响应405错误