如何在幾種方法上禁用彈簧安全認證

Question

我已經實現了spring基本認證，但是有一些我不想被認證的url。例如，http://www.mywebsite.com/rest/signUp

如何讓這未經驗證？

@Transactional 
    @RequestMapping(value = "/signUp", headers = "Accept=application/json", produces = MediaType.APPLICATION_JSON_VALUE, method = RequestMethod.GET) 
    public @ResponseBody String signUp(@RequestParam("user_name") String login, 
      @RequestParam("pass_word") String passWord, 
      @RequestParam("first_name") String firstName, 
      @RequestParam("last_name") String lastName, 
      @RequestParam("network_name") String networkName, 
      @RequestParam("email") String email) { 
     if(!userDAO.loginExists(login)) { 
      User user = new User(); 
      user.setLogin(login); 
      user.setFirstName(firstName); 
      user.setLastName(lastName); 
      user.setNetworkName(networkName); 
      user.setEmail(email); 
      user.setPassword(passWord); 
      sessionFactory.getCurrentSession().save(user); 
      return json("success"); 
     } 
     return json("failure"); 
    } 

Answer 1

<http> 
    <intercept-url pattern="/rest/signUp" access="IS_AUTHENTICATED_ANONYMOUSLY"/> 
    <!-- your other interceptor-url elements --> 
</http> 

添加攔截的URL模式來這是匿名身份驗證您的註冊服務。