Spring Boot似乎没有看到我的网络安全配置

Question

这是我第一次使用Spring Boot安全REST应用程序。我已经为我的类路径添加了spring-boot-starter-security，并且我知道自动保护所有URL。但是在我的开发中的这一点上，我还没有准备好这么做，所以我添加了一个antMatcher来允许所有的URL。但不管如何我把我的WebSecurityConfig，我仍然得到一个错误信息：

Full authentication is required to access this resource 

下面是我WebSecurityConfig全面。还有什么我需要为Spring做些挑剔吗？如何验证它是否被使用？非常感谢！

package com.company.jwt.security; 

import java.util.Properties; 

import org.springframework.context.annotation.Bean; 
import org.springframework.context.annotation.Configuration; 
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; 
import org.springframework.security.config.annotation.web.builders.HttpSecurity; 
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; 
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; 
import org.springframework.security.provisioning.InMemoryUserDetailsManager; 

import com.company.jwt.UserUtils; 

@Configuration 
@EnableWebSecurity 
public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 

@Override 
protected void configure(HttpSecurity httpSecurity) throws Exception { 
    httpSecurity.csrf().disable().authorizeRequests() 
     .antMatchers("/**").permitAll(); 
} 

@Override 
protected void configure(AuthenticationManagerBuilder authBuilder) throws Exception { 
    authBuilder.userDetailsService(inMemoryUserDetailsManager()); 
} 

@Bean 
public InMemoryUserDetailsManager inMemoryUserDetailsManager() { 
    Properties props = new Properties(); 
    UserUtils.getUsers() 
     .forEach(e -> props.put(e.getUsername(), e.getPassword() + "," + 
       e.getAuthorities() + ", enabled")); 
    return new InMemoryUserDetailsManager(props); 
} 
} 

Answer 1

您试图访问哪种网址？您创建的休息控制器？

可能有东西会覆盖您的网址的权限。

我跑了代码以下没有问题（SpringBoot 1.5.2）。

@SpringBootApplication 
@RestController 
public class DemoApplication { 

    public static void main(String[] args) { 
     SpringApplication.run(DemoApplication.class, args); 
    } 

    @RequestMapping("/foo") 
    public String foo() { 
     return "foo"; 
    } 
} 

@Configuration 
@EnableWebSecurity 
public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 

    @Override 
    protected void configure(HttpSecurity httpSecurity) throws Exception { 
     httpSecurity.csrf().disable().authorizeRequests() 
       .antMatchers("/**").permitAll(); 
    } 

    @Autowired 
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception { 
     auth 
       .inMemoryAuthentication() 
       .withUser("user").password("password").roles("USER"); 
    } 
} 


$ curl -s http://localhost:8080/foo 
foo