diff --git a/xuqm-log-service/src/main/java/com/xuqm/log/config/SecurityConfig.java b/xuqm-log-service/src/main/java/com/xuqm/log/config/SecurityConfig.java new file mode 100644 index 0000000..141346f --- /dev/null +++ b/xuqm-log-service/src/main/java/com/xuqm/log/config/SecurityConfig.java @@ -0,0 +1,26 @@ +package com.xuqm.log.config; + +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.http.SessionCreationPolicy; +import org.springframework.security.web.SecurityFilterChain; + +@Configuration +@EnableWebSecurity +public class SecurityConfig { + + @Bean + public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { + http + .csrf(csrf -> csrf.disable()) + .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) + .authorizeHttpRequests(auth -> auth + .requestMatchers("/actuator/**").permitAll() + .requestMatchers("/log/**").permitAll() + .anyRequest().permitAll() + ); + return http.build(); + } +}