|
|
@@ -130,6 +130,8 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.antMatchers("/ossNotify").permitAll()
|
|
|
.antMatchers("/priceList/list").permitAll()
|
|
|
.antMatchers("/user/collectionInvitorList").permitAll()
|
|
|
+ .antMatchers("/auth/oasisLogin").permitAll()
|
|
|
+ .antMatchers("/auth/oasisLoginPhone").permitAll()
|
|
|
// all other requests need to be authenticated
|
|
|
.anyRequest().authenticated().and()
|
|
|
// make sure we use stateless session; session won't be used to
|