fix: 放开/api/messages/conversation/**安全拦截
This commit is contained in:
@@ -50,7 +50,7 @@ public class SecurityConfig {
|
||||
// WebSocket
|
||||
.requestMatchers("/ws/**").permitAll()
|
||||
// 静态资源
|
||||
.requestMatchers("/webapp/**", "/assets/**", "/uploads/**", "/files/avatar/**", "/api/files/avatar/**", "/api/messages/file/**").permitAll()
|
||||
.requestMatchers("/webapp/**", "/assets/**", "/uploads/**", "/files/avatar/**", "/api/files/avatar/**", "/api/messages/file/**", "/api/messages/conversation/**").permitAll()
|
||||
// 前端页面路由(所有非 /api/ 的路由,由 Vue Router 处理)
|
||||
.requestMatchers("/", "/login", "/register", "/desktop/**", "/favicon.ico").permitAll()
|
||||
// 其他所有请求需要认证
|
||||
|
||||
Reference in New Issue
Block a user