1. 增加 yudao-sso-demo-by-code 项目,实现基于授权码模式的单点登录

2. 完成 yudao-sso-demo-by-code 的跳转 SSO 流程
This commit is contained in:
YunaiV
2022-09-29 21:26:31 +08:00
parent 2b784d180e
commit eef233644c
9 changed files with 159 additions and 1 deletions

View File

@ -0,0 +1,13 @@
package cn.iocoder.yudao.ssodemo;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
@SpringBootApplication
public class SSODemoApplication {
public static void main(String[] args) {
SpringApplication.run(SSODemoApplication.class, args);
}
}

View File

@ -0,0 +1,14 @@
package cn.iocoder.yudao.ssodemo.controller;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PostMapping;
@Controller("/auth")
public class AuthController {
@PostMapping("/login-by-code")
public void loginByCode() {
}
}

View File

@ -0,0 +1,20 @@
package cn.iocoder.yudao.ssodemo.framework;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@Configuration
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity httpSecurity) throws Exception {
httpSecurity.authorizeRequests()
// 1. 静态资源,可匿名访问
.antMatchers(HttpMethod.GET, "/*.html", "/**/*.html", "/**/*.css", "/**/*.js").permitAll()
// last. 兜底规则,必须认证
.and().authorizeRequests()
.anyRequest().authenticated();
}
}