集成Angular 5 App和Spring引导。 Spring Security阻止了该应用程序

Question

I have added the built angular app to the static folder under resources. when i go to localhost:8080 , the app is not shown. How do i configure spring security to allow only the angular 5 app through.

My Http configuration:

http
            .cors()
                .and()
            .csrf()
                .disable()
            .exceptionHandling()
                .authenticationEntryPoint(unauthorizedHandler)
                .and()
            .sessionManagement()
                .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                .and()
            .authorizeRequests()
                .antMatchers("/auth/**").permitAll()
                .antMatchers("/h2-console/**").permitAll()
                .antMatchers("/users/checkUsernameAvailability",
                        "/users/checkEmailAvailability")
                    .permitAll()
                .anyRequest().authenticated();

Answer 1

You have following:

.anyRequest().authenticated();

So accessing http://localhost:8080 which is the root will be blocked by Spring Security if you are not logged in.

Try logging in adding following line.

.antMatchers("/**").permitAll()

The above line must be only for testing.