From 4c52c27cba01f55b4ec431b50c57511805e971a8 Mon Sep 17 00:00:00 2001
From: liuchen864 <23082234@qq.com>
Date: Sat, 7 Oct 2023 11:37:56 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=94=B9=E7=99=BB=E9=99=86=E9=AA=8C?=
 =?UTF-8?q?=E8=AF=81=E7=A0=81=E3=80=82?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../tenant/core/security/TenantSecurityWebFilter.java          | 3 ++-
 .../security/config/WinWebSecurityConfigurerAdapter.java       | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/win-framework/win-spring-boot-starter-biz-tenant/src/main/java/com/win/framework/tenant/core/security/TenantSecurityWebFilter.java b/win-framework/win-spring-boot-starter-biz-tenant/src/main/java/com/win/framework/tenant/core/security/TenantSecurityWebFilter.java
index f31135fd..b939bd3b 100644
--- a/win-framework/win-spring-boot-starter-biz-tenant/src/main/java/com/win/framework/tenant/core/security/TenantSecurityWebFilter.java
+++ b/win-framework/win-spring-boot-starter-biz-tenant/src/main/java/com/win/framework/tenant/core/security/TenantSecurityWebFilter.java
@@ -102,7 +102,8 @@ public class TenantSecurityWebFilter extends ApiRequestFilter {
 
     private boolean isIgnoreUrl(HttpServletRequest request) {
         // 快速匹配，保证性能
-        if (CollUtil.contains(tenantProperties.getIgnoreUrls(), request.getRequestURI())) {
+        String uri = request.getRequestURI();
+        if (CollUtil.contains(tenantProperties.getIgnoreUrls(), uri)) {
             return true;
         }
         // 逐个 Ant 路径匹配
diff --git a/win-framework/win-spring-boot-starter-security/src/main/java/com/win/framework/security/config/WinWebSecurityConfigurerAdapter.java b/win-framework/win-spring-boot-starter-security/src/main/java/com/win/framework/security/config/WinWebSecurityConfigurerAdapter.java
index 0b61db62..b2cb477c 100644
--- a/win-framework/win-spring-boot-starter-security/src/main/java/com/win/framework/security/config/WinWebSecurityConfigurerAdapter.java
+++ b/win-framework/win-spring-boot-starter-security/src/main/java/com/win/framework/security/config/WinWebSecurityConfigurerAdapter.java
@@ -128,7 +128,7 @@ public class WinWebSecurityConfigurerAdapter {
                 // 1.4 设置 App API 无需认证
                 .antMatchers(buildAppApi("/**")).permitAll()
                 // 1.5 验证码captcha 允许匿名访问
-                .antMatchers("/captcha/captchaImage").permitAll()
+                //.antMatchers("/captcha/captchaImage").permitAll()
                 // 1.6 webSocket 允许匿名访问
                 .antMatchers("/websocket/message").permitAll()
                 // ②：每个项目的自定义规则