fix(security): 移除登录白名单中的 /api/grantCmsPermission 接口
- 从安全配置中剔除 /api/grantCmsPermission 接口的免认证访问 - 加强接口访问控制,防止未授权的权限授予操作 - 确保 CMS 权限管理接口需要严格认证验证
This commit is contained in:
@@ -43,7 +43,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
||||
"/api/loginByUserId",
|
||||
"/api/loginByEmail",
|
||||
"/api/register",
|
||||
"/api/grantCmsPermission",
|
||||
"/api/superAdminRegister",
|
||||
"/api/findAccountByPhone",
|
||||
"/api/resetPassword",
|
||||
|
||||
Reference in New Issue
Block a user