java - Spring WebSecurityConfigurerAdapter 允许 POST？

Question

我想为我网站上的某个“/interface”URL 启用 POST 请求。我已经通过 Class<?>[] getRootConfigClasses() 成功加载了类(class), HttpSecurity http 的指定 CSP header 存在。

每当我向 /interface 发出请求时, 我得到 HTTP 403 .

@Configuration
@EnableWebSecurity
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter
{

    @Override
    protected void configure(HttpSecurity http) throws Exception
    {
        http
            .authorizeRequests().antMatchers(HttpMethod.POST, "/interface").permitAll().and()
            .headers()
            .contentTypeOptions().and()
            .cacheControl().and()
            .httpStrictTransportSecurity().and()
            .frameOptions().and()
            .contentSecurityPolicy("the csp header. it is present on every response.");
    }
}

Answer 1

尝试覆盖另一种配置方法:configure(WebSecurity webSecurity)。

@Override
public void configure(WebSecurity webSecurity) throws Exception {
    webSecurity.ignoring().antMatchers(POST, "/interface");
}