fix: 放开/api/messages/conversation/**安全拦截

This commit is contained in:
2026-04-03 17:35:49 +08:00
parent a4a18f2b82
commit 4c22109a95

View File

@@ -50,7 +50,7 @@ public class SecurityConfig {
// WebSocket
.requestMatchers("/ws/**").permitAll()
// 静态资源
.requestMatchers("/webapp/**", "/assets/**", "/uploads/**", "/files/avatar/**", "/api/files/avatar/**", "/api/messages/file/**").permitAll()
.requestMatchers("/webapp/**", "/assets/**", "/uploads/**", "/files/avatar/**", "/api/files/avatar/**", "/api/messages/file/**", "/api/messages/conversation/**").permitAll()
// 前端页面路由(所有非 /api/ 的路由,由 Vue Router 处理)
.requestMatchers("/", "/login", "/register", "/desktop/**", "/favicon.ico").permitAll()
// 其他所有请求需要认证