chore: 配置sso单点登陆

2 years ago · a0d4cdaaf8
2 changed files with 7 additions and 9 deletions
--- a/kicc-auth/src/main/java/com/cloud/kicc/auth/config/WebSecurityConfiguration.java
+++ b/kicc-auth/src/main/java/com/cloud/kicc/auth/config/WebSecurityConfiguration.java
@ -22,14 +22,15 @@ import org.springframework.security.web.authentication.logout.LogoutSuccessHandl
				@@ -22,14 +22,15 @@ import org.springframework.security.web.authentication.logout.LogoutSuccessHandl

 /**
 *<p>
- * 认证相关配置
+ * 认证安全相关配置
 * 并且设置为主,以及加载优先级为1,防止被微服务工程覆盖
+ * 目前SSO主要还是采用oauth2的token做sso授权中心,不会采用security的session做SSO授权中心,原因需要维护(oauth2的token,security的session)两套登陆方式代码
+ * authorization-code 模式目前只处理第三方系统接入
 *</p>
 *
 * @Author: wangxiang4
- * @Date: 2022/2/16
+ * @Since: 2023/8/6
 */
-
@Primary
@Order(90)
@Configuration
@ -54,10 +55,7 @@ public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
				@@ -54,10 +55,7 @@ public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
 			.antMatchers("/token/**")
 			.permitAll()
 			.anyRequest()
-			.authenticated()
-			.and()
-			// CRSF禁用，因为不使用session
-			.csrf().disable();
+			.authenticated();
 	}

 	/**
--- a/kicc-auth/src/main/resources/templates/ftl/login.ftl
+++ b/kicc-auth/src/main/resources/templates/ftl/login.ftl
@ -8,7 +8,7 @@
				@@ -8,7 +8,7 @@
    <meta name="author" content="">

    <!--拦截后返回的页面-->
-    <title>长沙康来生物有限公司 统一认证</title>
+    <title>长沙康来生物有限公司 授权认证</title>

    <link href="/css/bootstrap.min.css" rel="stylesheet">
    <link href="/css/signin.css" rel="stylesheet">
@ -17,7 +17,7 @@
				@@ -17,7 +17,7 @@
 <body class="sign_body">
 <div class="container form-margin-top">
    <form class="form-signin" action="/token/form" method="post">
-        <h2 class="form-signin-heading" align="center">康来生物统一认证系统</h2>
+        <h2 class="form-signin-heading" align="center">康来生物统一授权认证系统</h2>
        <input type="hidden" name="clientId" class="form-control" value="kicc" placeholder="所属客户端" >
        <input type="text" name="username" class="form-control form-margin-top" placeholder="账号" required autofocus>
        <input type="password" name="password" class="form-control" placeholder="密码" required>