匿名访问

mp-framework/src/main/java/com/qs/mp/framework/config/SecurityConfig.java

@@ -111,7 +111,11 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                     "/api/v1/mp/channel/invite/register",
                     "/api/v1/mp/wx/urlschema/generate",
                     "/api/v1/mp/wx/code/generate",
-                    "/api/v1/mp/user/ticket/queryLuckyNum").anonymous()
+                    "/api/v1/mp/user/ticket/queryLuckyNum",
+                    "/api/v1/mp/user/mall/ticket/detail",
+                    "/api/v1/mp/user/mall/ticket/list",
+                    "/api/v1/mp/user/exchange/goods/list",
+                    "/api/v1/mp/user/exchange/goods/detail").anonymous()
                 .antMatchers(
                         HttpMethod.GET,
                         "/",
@@ -129,7 +133,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                 .antMatchers("/*/api-docs").anonymous()
                 .antMatchers("/druid/**").anonymous()
                 .antMatchers("/service/notify/**").anonymous()
-                .antMatchers("/api/v1/mp/user/mall/**").anonymous()
 
                 // 除上面外的所有请求全部需要鉴权认证
                 .anyRequest().authenticated()