@ -55,7 +55,10 @@ public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
.antMatchers("/token/**")
.permitAll()
.anyRequest()
.authenticated();
.authenticated()
.and()
// CRSF禁用,因为不使用session,防止验证CookieCSRF令牌导致拦截到登陆页面
.csrf().disable();
}
/**