如何允許在@RequestMapping上進行匿名訪問？

Question

如何定義@RequestMapping方法以顯式允許匿名（未經授權）訪問？

下不工作，總是讓401 Unauthorized：

@RequestMapping("/test") 
@Secured(value={"ROLE_ANONYMOUS"}) 
public String test() { 
    return "OK"; 
} 

一般來說整個應用程序被固定如下，使用spring-boot：

security.basic.enabled=true。

@Configuration 
public class AuthConfig extends WebSecurityConfigurerAdapter { 
    @Autowired 
    private UserDetailsService userDetailsService; 

    @Override 
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
     auth.userDetailsService(userDetailsService).passwordEncoder(new BCryptPasswordEncoder()); 
    } 
} 

Answer 1

您可以覆蓋configure(HttpSecurity httpSecurity)方法和定義有您的規則：

@Configuration 
public class AuthConfig extends WebSecurityConfigurerAdapter { 
    @Autowired 
    private UserDetailsService userDetailsService; 

    @Override 
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
     auth.userDetailsService(userDetailsService).passwordEncoder(new BCryptPasswordEncoder()); 
    } 

    @Override 
    protected void configure(HttpSecurity httpSecurity) throws Exception 
    { 
     httpSecurity.authorizeRequests() 
      .antMatchers("/test") 
      .permitAll(); 
     super.configure(http); 
    } 
} 

Answer 2

@Configuration 
public class AuthConfig extends WebSecurityConfigurerAdapter { 
    @Autowired 
    private UserDetailsService userDetailsService; 

    @Override 
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
     auth.userDetailsService(userDetailsService).passwordEncoder(new BCryptPasswordEncoder()); 
    } 

    @Override 
    protected void configure(HttpSecurity httpSecurity) throws Exception 
    { 
     httpSecurity.authorizeRequests().regexMatcher("^((?!test).)*$").permitAll(); 
    } 
} 

我不知道test前斜線，但只是嘗試這種負面環視方法。