Browse Source

权限放行调整

cup 3 years ago
parent
commit
6e0d68a26a

+ 5 - 1
mp-framework/src/main/java/com/qs/mp/framework/config/SecurityConfig.java

@@ -112,7 +112,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                     "/api/v1/mp/wx/urlschema/generate",
                     "/api/v1/mp/wx/code/generate",
                     "/api/v1/mp/user/ticket/queryLuckyNum",
-                    "/api/v1/mp/user/ticket/hitPrizeBarrage",
                     "/api/v1/mp/user/mall/ticket/detail",
                     "/api/v1/mp/user/mall/ticket/list",
                     "/api/v1/mp/user/exchange/goods/list",
@@ -129,6 +128,11 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter
                         "/**/*.js",
                         "/profile/**"
                 ).permitAll()
+                // 匹配放行 POST 请求,如果携带了 token 也不会进行拦截
+                .antMatchers(
+                        HttpMethod.POST,
+                        "/api/v1/mp/user/ticket/hitPrizeBarrage"
+                ).permitAll()
                 .antMatchers("/common/download**").anonymous()
                 .antMatchers("/common/download/resource**").anonymous()
                 .antMatchers("/swagger-ui.html").anonymous()