[英]Spring boot: disable security auto configuration
我有一个包含多个部分的Web项目。 Web Admin
部分包含:
compile('org.springframework.boot:spring-boot-starter-web')
compile("org.springframework.boot:spring-boot-starter-thymeleaf")
compile("org.springframework.boot:spring-boot-starter-jetty")
compile("org.springframework.boot:spring-boot-starter-actuator")
主项目构建文件包含:
compile group: 'org.springframework', name: "spring-webmvc", version: springVersion
compile(group: 'org.springframework.security', name: "spring-security-web", version: springSecurityVersion) { exclude(module: 'spring-jdbc') }
Spring Boot应用程序文件:
@SpringBootApplication(exclude = {SecurityAutoConfiguration.class})
public class WebAdminApplication {
public static void main(String[] args) {
SpringApplication.run(WebAdminApplication.class, args);
}
}
但是,当我对管理部分执行http请求时,我在AuthenticationProvider
获取了用户名和密码:
auth.getPrincipal() -> user
auth.getCredentials() -> caeebd3a-307b-4edf-8f2f-833fad9ebc00
如何禁用自动安全性?
如果查看spring boot的spring.factories (在撰写本文时为1.3.5版),可以看到security具有4个自动配置类:
org.springframework.boot.autoconfigure.security.SecurityAutoConfiguration,\
org.springframework.boot.autoconfigure.security.SecurityFilterAutoConfiguration,\
org.springframework.boot.autoconfigure.security.FallbackWebSecurityAutoConfiguration,\
org.springframework.boot.autoconfigure.security.oauth2.OAuth2AutoConfiguration,\
您可能还希望禁用SecurityFilterAutoConfiguration(或全部四个)
即使我也面临着同样的问题。 因此,我添加了以下代码。
情况1:如果@SpringBootApplication(exclude = { SecurityAutoConfiguration.class })
激活' @SpringBootApplication(exclude = { SecurityAutoConfiguration.class })
': @SpringBootApplication(exclude = { SecurityAutoConfiguration.class })
情况2:如果您已经激活了' @SpringBootApplication(exclude = { org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class, org.springframework.boot.actuate.autoconfigure.security.servlet.ManagementWebSecurityAutoConfiguration.class})
': @SpringBootApplication(exclude = { org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class, org.springframework.boot.actuate.autoconfigure.security.servlet.ManagementWebSecurityAutoConfiguration.class})
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.