禁用Spring Security Basic登录 - Spring REST Web服务

Question

在我的SecurityConfig.java中，

    @Override
protected void configure(AuthenticationManagerBuilder auth)
        throws Exception {
    auth.inMemoryAuthentication().withUser("user").password("password")
            .roles("USER");
}

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests().antMatchers("/**").hasRole("USER")
            .anyRequest().anonymous().and().httpBasic();
}

我如何完全禁用Spring Security，以便能够访问我的Web服务而无需输入“user”和“password”？

Answer 1

使用此Spring Security配置：

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests().anyRequest().permitAll();
}

请注意，这不会在Spring Security中从请求链中禁用，它只是告诉Spring Security允​​许所有请求