//package com.iailab.monitor.config; // //import de.codecentric.boot.admin.server.config.AdminServerProperties; //import org.springframework.context.annotation.Configuration; //import org.springframework.security.config.annotation.web.builders.HttpSecurity; //import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; //import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler; //import org.springframework.security.web.csrf.CookieCsrfTokenRepository; // ///** // * @author scott // */ //@Configuration //public class SecuritySecureConfig extends WebSecurityConfigurerAdapter { // // private final String adminContextPath; // // public SecuritySecureConfig(AdminServerProperties adminServerProperties) { // this.adminContextPath = adminServerProperties.getContextPath(); // } // // // @Override // protected void configure(HttpSecurity http) throws Exception { // // 登录成功处理类 // SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler(); // successHandler.setTargetUrlParameter("redirectTo"); // successHandler.setDefaultTargetUrl(adminContextPath + "/"); // // http.authorizeRequests() // //静态文件允许访问 // .antMatchers(adminContextPath + "/assets/**").permitAll() // //登录页面允许访问 // .antMatchers(adminContextPath + "/login", "/css/**", "/js/**", "/image/*").permitAll() // //其他所有请求需要登录 // .anyRequest().authenticated() // .and() // //登录页面配置,用于替换security默认页面 // .formLogin().loginPage(adminContextPath + "/login").successHandler(successHandler).and() // //登出页面配置,用于替换security默认页面 // .logout().logoutUrl(adminContextPath + "/logout").and() // .httpBasic().and() // .csrf() // .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()) // .ignoringAntMatchers( // "/instances", // "/actuator/**" // ); // // } // //}