更新 DevBootSecurityConfig.java.ftl

SLN/%PUBPRJ%-boot/src/main/java/%SYS_PKGPATH%/config/DevBootSecurityConfig.java.ftl

@@ -6,6 +6,7 @@ package ${pub.getPKGCodeName()}.config;
 import ${pub.getPKGCodeName()}.util.security.AuthenticationEntryPoint;
 import ${pub.getPKGCodeName()}.util.security.AuthorizationTokenFilter;
 import ${pub.getPKGCodeName()}.util.service.AuthenticationUserService;
+import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
@@ -55,6 +56,9 @@ public class DevBootSecurityConfig extends WebSecurityConfigurerAdapter {
 
     @Value("${r'${ibiz.file.previewpath:ibizutil/preview}"'})
     private String previewpath;
+    
+    @Value("${r'${ibiz.auth.excludesPattern:}"'})
+    private String excludesPattern;
 
     @Autowired
     public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
@@ -116,8 +120,16 @@ public class DevBootSecurityConfig extends WebSecurityConfigurerAdapter {
                     // 文件操作
                    .antMatchers("/"+downloadpath+"/**").permitAll()
                    .antMatchers("/"+uploadpath).permitAll()
-                   .antMatchers("/"+previewpath+"/**").permitAll()
-                .anyRequest().authenticated()
+                   .antMatchers("/"+previewpath+"/**").permitAll();
+                   
+        if (StringUtils.isNotBlank(excludesPattern)) {
+            for (String excludePattern : excludesPattern.split("\\s*,\\s*")) {
+                authenticationTokenFilter.addExcludePattern(excludePattern);
+                httpSecurity.authorizeRequests().antMatchers(excludePattern).permitAll();
+            }
+        }
+        
+        httpSecurity.authorizeRequests().anyRequest().authenticated()
                 // 防止iframe 造成跨域
                 .and().headers().frameOptions().disable();
         httpSecurity