spring - 绕过弹簧安全

Question

我有一个网络服务，我希望每个人都能访问这个服务。

在 web.xml 中

<filter>
    <filter-name>springSecurityFilterChainRendering</filter-name>
    <filter-class>
        org.springframework.web.filter.DelegatingFilterProxy
    </filter-class>
</filter>
    <filter-mapping>
           <filter-name>springSecurityFilterChainRemoting</filter-name>
           <url-pattern>/cxf/*</url-pattern>
    </filter-mapping> 

在过滤器链远程处理.xml

       <bean id="springSecurityFilterChainRemoting" class="org.springframework.security.util.FilterChainProxy">
    <security:filter-chain-map path-type="ant">
        <!-- Remoting: stateful WebServices; 
            httpSessionContextIntegrationFilter creates SecurityContext 
            and populates it with information obtained from the HttpSession. 
            contextFilter supplies context with 
            the current project for the current HTTP user session; 
            securityFilter authenticates the user. -->

         <security:filter-chain pattern="/cxf/KioskService/**"
            filters="none"/>

        <security:filter-chain pattern="/cxf/**"
            filters="httpSessionContextIntegrationFilter, contextFilter,securityFilter"/>

    </security:filter-chain-map>
</bean>

我怎么能绕过这些过滤器，每个人都使用这个服务。服务名称 KioskService

Answer 1

更改 web.xml 过滤器映射定义：

<url-pattern>/cxf/*</url-pattern>

仅拦截您希望安全的网址。