|
@@ -3,10 +3,11 @@ package com.diagbot.config.security;
|
|
import com.diagbot.facade.TokenFacade;
|
|
import com.diagbot.facade.TokenFacade;
|
|
import com.diagbot.util.HttpUtils;
|
|
import com.diagbot.util.HttpUtils;
|
|
import com.diagbot.util.StringUtil;
|
|
import com.diagbot.util.StringUtil;
|
|
-import lombok.SneakyThrows;
|
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.security.access.AccessDecisionManager;
|
|
import org.springframework.security.access.AccessDecisionManager;
|
|
|
|
+import org.springframework.security.access.AccessDeniedException;
|
|
import org.springframework.security.access.ConfigAttribute;
|
|
import org.springframework.security.access.ConfigAttribute;
|
|
|
|
+import org.springframework.security.authentication.AccountExpiredException;
|
|
import org.springframework.security.authentication.InsufficientAuthenticationException;
|
|
import org.springframework.security.authentication.InsufficientAuthenticationException;
|
|
import org.springframework.security.core.Authentication;
|
|
import org.springframework.security.core.Authentication;
|
|
import org.springframework.security.core.GrantedAuthority;
|
|
import org.springframework.security.core.GrantedAuthority;
|
|
@@ -14,9 +15,7 @@ import org.springframework.security.web.FilterInvocation;
|
|
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
|
|
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
|
|
import org.springframework.stereotype.Service;
|
|
import org.springframework.stereotype.Service;
|
|
|
|
|
|
-import javax.security.auth.login.AccountExpiredException;
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import javax.servlet.http.HttpServletRequest;
|
|
-import java.nio.file.AccessDeniedException;
|
|
|
|
import java.util.Collection;
|
|
import java.util.Collection;
|
|
|
|
|
|
/**
|
|
/**
|
|
@@ -29,7 +28,6 @@ public class UrlAccessDecisionManager implements AccessDecisionManager {
|
|
@Autowired
|
|
@Autowired
|
|
private TokenFacade tokenFacade;
|
|
private TokenFacade tokenFacade;
|
|
|
|
|
|
- @SneakyThrows
|
|
|
|
@Override
|
|
@Override
|
|
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {
|
|
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {
|
|
HttpServletRequest request = ((FilterInvocation) object).getHttpRequest();
|
|
HttpServletRequest request = ((FilterInvocation) object).getHttpRequest();
|
|
@@ -201,6 +199,7 @@ public class UrlAccessDecisionManager implements AccessDecisionManager {
|
|
|| matchers("/qc/data/sendHomeOperation", request)
|
|
|| matchers("/qc/data/sendHomeOperation", request)
|
|
|| matchers("/qc/data/sendCrisis", request)
|
|
|| matchers("/qc/data/sendCrisis", request)
|
|
|| matchers("/qc/data/deleteFlag", request)
|
|
|| matchers("/qc/data/deleteFlag", request)
|
|
|
|
+ || matchers("/qc/data/placeFile", request)
|
|
|| matchers("/qc/data/sendLisResults", request)
|
|
|| matchers("/qc/data/sendLisResults", request)
|
|
|| matchers("/qc/data/sendPacsResults", request)
|
|
|| matchers("/qc/data/sendPacsResults", request)
|
|
|| matchers("/qc/doctoradvice/getPage", request)
|
|
|| matchers("/qc/doctoradvice/getPage", request)
|