douejuan9162 2018-05-24 15:02
浏览 35

根据奏鸣曲中的路径检查用户身份验证

is it possible to check if user is authenticated to access the URl he requested. What I want to do is when user not logged in he can't see files by url.

example : => Screenshot

Any suggestions? Thank you

Update

this is my access control: All access working fine for my application

    - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }

    - { path: ^/admin/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin/logout$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin/login-check$, role: IS_AUTHENTICATED_ANONYMOUSLY }

    - { path: ^/admin/, role: [ROLE_USER] }
    - { path: ^/admin/rlsh/dashboard, role: IS_AUTHENTICATED_FULLY }
    - { path: ^/uploads/media, role: IS_AUTHENTICATED_FULLY }
    - { path: ^/profile/, role: IS_AUTHENTICATED_FULLY }
    - { path: ^/shop/basket/step/, role: IS_AUTHENTICATED_FULLY }
    - { path: ^/shop/user/, role: IS_AUTHENTICATED_FULLY }
    # - { path: ^/.*, role: IS_AUTHENTICATED_ANONYMOUSLY }
  • 写回答

1条回答 默认 最新

  • dto5637 2018-05-24 16:17
    关注

    If you want the user to be connected to access to your files, you could use a simple access_control, please take a look

    access_control:
        - { path: ^/uploads/media, role: IS_AUTHENTICATED_FULLY }
    

    A not authenticated user trying to access to your files will get a 403 forbidden response.

    Btw you can customize the path with a regex and many others things, feel free to take a look

    评论

报告相同问题?

悬赏问题

  • ¥20 win11修改中文用户名路径
  • ¥15 win2012磁盘空间不足,c盘正常,d盘无法写入
  • ¥15 用土力学知识进行土坡稳定性分析与挡土墙设计
  • ¥70 PlayWright在Java上连接CDP关联本地Chrome启动失败,貌似是Windows端口转发问题
  • ¥15 帮我写一个c++工程
  • ¥30 Eclipse官网打不开,官网首页进不去,显示无法访问此页面,求解决方法
  • ¥15 关于smbclient 库的使用
  • ¥15 微信小程序协议怎么写
  • ¥15 c语言怎么用printf(“\b \b”)与getch()实现黑框里写入与删除?
  • ¥20 怎么用dlib库的算法识别小麦病虫害