Difference between access=“permitAll” and filters=“none”?

前端 未结 1 1953
一生所求
一生所求 2020-12-31 01:16

Here is a part from Spring Security petclinic example:


    
           


        
相关标签:
1条回答
  • 2020-12-31 01:34

    The difference is that filters = "none" disables Spring Security filters for the specified URLs, whereas access = "permitAll" configures authorization without disabling filters.

    In practice, filters = "none" may cause problems when resources behind it require some functionality of Spring Security. For example, you can't use it for user registration page that performs programmatic login on submit (User Granted Authorities are always : ROLE_ANONYMOUS?).

    0 讨论(0)
提交回复
热议问题