去掉放行logins, 解决越权漏洞

4 years ago · fdb0443c3e
parent 655b25fb98
commit fdb0443c3e
1 changed files with 9 additions and 1 deletions
--- a/src/main/resources/application-prod.properties
+++ b/src/main/resources/application-prod.properties
@ -56,4 +56,12 @@ redis.cluster.minIdle=3
 redis.cluster.nodes=192.168.136.191:8000,192.168.136.191:8001,192.168.136.191:8002

 server.port=8090
-server.servlet.context-path= /liuwanr
+server.servlet.context-path= /liuwanr
+
+
+#开启全局拦截,为空不开启拦截
+#auth.openInterceptStr=
+auth.openInterceptStr=/**
+#放行Url
+auth.permitUrl=/userInfo/adminLogins/**,/userInfo/loginSchoolClient/**,/province/queryProvince/**,/city/queryCity/**,/customer/querySchool/**,/userInfo/queryPhone/**,/userInfo/updateLogInNumber/**,/userInfo/getAccountPassword
+