refactor(authentication): 优化权限配置

conifercone · Dec 19, 2024 · b4109ee · b4109ee
1 parent 7e4f1f9
commit b4109ee
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/...lient/src/main/java/baby/mumu/authentication/client/config/GrpcSecurityConfiguration.java b/...lient/src/main/java/baby/mumu/authentication/client/config/GrpcSecurityConfiguration.java
@@ -122,8 +122,8 @@ GrpcSecurityMetadataSource grpcSecurityMetadataSource() {
                       .collect(Collectors.toSet())));
                 } else if (grpcPolicy.isPermitAll()) {
                   source.set(methods, AccessPredicate.permitAll());
-                } else {
-                  source.setDefault(AccessPredicate.denyAll());
+                } else if (grpcPolicy.isDenyAll()) {
+                  source.set(methods, AccessPredicate.denyAll());
                 }
               } catch (ClassNotFoundException | InvocationTargetException |
                        IllegalAccessException | NoSuchMethodException e) {
@@ -133,6 +133,7 @@ GrpcSecurityMetadataSource grpcSecurityMetadataSource() {
           }
         });
     }
+    source.setDefault(AccessPredicate.authenticated());
     return source;
   }
 

diff --git a/...cation-client/src/main/java/baby/mumu/authentication/client/config/JWTSecurityConfig.java b/...cation-client/src/main/java/baby/mumu/authentication/client/config/JWTSecurityConfig.java
@@ -96,6 +96,8 @@ public SecurityFilterChain filterChain(HttpSecurity http, JwtDecoder jwtDecoder,
                   .toArray(String[]::new));
             } else if (policy.isPermitAll()) {
               authorizedUrl.permitAll();
+            } else if (policy.isDenyAll()) {
+              authorizedUrl.denyAll();
             }
           }
         );

diff --git a/...client/src/main/java/baby/mumu/authentication/client/config/ResourceServerProperties.java b/...client/src/main/java/baby/mumu/authentication/client/config/ResourceServerProperties.java
@@ -53,6 +53,7 @@ public static class Policy {
 
     private boolean permitAll;
 
+    private boolean denyAll;
   }
 
   /**
@@ -86,5 +87,7 @@ public static class GrpcPolicy {
     private String role;
 
     private boolean permitAll;
+
+    private boolean denyAll;
   }
 }