SpringBoot2.* GateWay网关关闭security验证

1.  
   package com.njcb.corp.gateway.security;
2.  
    
3.  
   import lombok.extern.slf4j.Slf4j;
4.  
   import org.springframework.context.annotation.Bean;
5.  
   import org.springframework.context.annotation.Configuration;
6.  
   import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
7.  
   import org.springframework.security.config.web.server.ServerHttpSecurity;
8.  
   import org.springframework.security.web.server.SecurityWebFilterChain;
9.  
   import org.springframework.web.filter.reactive.HiddenHttpMethodFilter;
10.  
    import org.springframework.web.server.ServerWebExchange;
11.  
    import org.springframework.web.server.WebFilterChain;
12.  
    import reactor.core.publisher.Mono;
13.  
     
14.  
    /**
15.  
    * @author Lei Ji Hui
16.  
    * @version V1.0
17.  
    * @date 2021/8/20 17:19
18.  
    * @description: 注意：webflux环境下要生效必须用注解@EnableWebFluxSecurity使其生效
19.  
    * cloud gateway采用的webflux技术（此处与web不同）
20.  
    * @className WebSecurityConfig
21.  
    **/
22.  
    @Configuration
23.  
    @EnableWebFluxSecurity
24.  
    @Slf4j
25.  
    public class WebSecurityConfig {
26.  
     
27.  
    @Bean
28.  
    SecurityWebFilterChain webFluxSecurityFilterChain(ServerHttpSecurity http) throws Exception {
29.  
    http.authorizeExchange()
30.  
    .anyExchange()
31.  
    .permitAll();
32.  
    // 一些配置
33.  
    http.csrf().disable()//必须支持跨域
34.  
    .httpBasic().disable()
35.  
    .logout().disable()
36.  
    .formLogin().disable();
37.  
    return http.build();
38.  
    }
39.  
     
40.  
    @Bean
41.  
    public HiddenHttpMethodFilter hiddenHttpMethodFilter() {
42.  
    return new HiddenHttpMethodFilter() {
43.  
    @Override
44.  
    public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
45.  
    return chain.filter(exchange);
46.  
    }
47.  
    };
48.  
    }
49.  
    }

注意：gateway网关项目和普通springboot项目关闭security验证的方式不同。原因是gateway采用的webflux技术，不是servlet。

这篇好文章是转载于：学新通技术网