From 8de5bdb55dc067de0d53c1b73974b6089d670551 Mon Sep 17 00:00:00 2001
From: haozq <1611483981@qq.com>
Date: Tue, 16 Dec 2025 16:13:48 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E8=A1=A8=E5=90=8D=E7=A7=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../hnrn/rnama/core/config/BnsSecurityConfig.java |  8 +++-----
 .../bonus/hnrn/rnama/core/config/TokenFilter.java | 15 +++++++++++++++
 2 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/BnsSecurityConfig.java b/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/BnsSecurityConfig.java
index 970808d..4a3dc4d 100644
--- a/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/BnsSecurityConfig.java
+++ b/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/BnsSecurityConfig.java
@@ -53,10 +53,9 @@ public class BnsSecurityConfig extends WebSecurityConfigurerAdapter {
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()//开启登录配置
-                .antMatchers("/gzRealName/**","/user/**","/offLine/**").permitAll()
-                .anyRequest().authenticated()//表示剩余的其他接口，登录之后就能访问
-                .and()
-                .formLogin()
+                .antMatchers("/gzRealName/**","/user/**","/offLine/**","/login").permitAll()
+                .anyRequest().authenticated();//表示剩余的其他接口，登录之后就能访问
+            http.formLogin().loginProcessingUrl("/login")
                 //登录成功的处理器
                 .successHandler(new AuthenticationSuccessHandler() {
                     @Override
@@ -109,7 +108,6 @@ public class BnsSecurityConfig extends WebSecurityConfigurerAdapter {
                         ResponseUtil.responseJson(resp, HttpStatus.OK.value(), map);
                     }
                 })
-                .permitAll()//和表单登录相关的接口统统都直接通过
                 .and()
                 .logout()
                 .logoutUrl("/logout")
diff --git a/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/TokenFilter.java b/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/TokenFilter.java
index 01d8abc..12167fe 100644
--- a/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/TokenFilter.java
+++ b/realname-app/src/main/java/com/bonus/hnrn/rnama/core/config/TokenFilter.java
@@ -2,8 +2,10 @@ package com.bonus.hnrn.rnama.core.config;
 
 import com.bonus.hnrn.rnama.core.entity.UserBean;
 import com.bonus.hnrn.rnama.core.service.TokenService;
+import com.bonus.hnrn.rnama.core.util.ResponseUtil;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
 import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.security.core.userdetails.UserDetailsService;
@@ -15,6 +17,7 @@ import javax.servlet.ServletException;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.io.IOException;
+import java.util.Collections;
 
 /**
  * Token过滤器
@@ -34,6 +37,18 @@ public class TokenFilter extends OncePerRequestFilter {
 	protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
 			throws ServletException, IOException {
 		String token = getToken(request);
+		String requestURI = request.getRequestURI();
+		if ("/login".equals(requestURI)) {
+			filterChain.doFilter(request, response);
+			return;
+		}else{
+			if (StringUtils.isEmpty(token)) {
+				// 无 Token 时返回 401
+				ResponseUtil.responseJson(response, HttpStatus.UNAUTHORIZED.value(),
+						Collections.singletonMap("msg", "未登录或 Token 过期"));
+				return;
+			}
+		}
 		if (StringUtils.isNotBlank(token)) {
 			UserBean loginUser = tokenService.getLoginUser(token);
 			if (loginUser != null) {