java - Spring Security 使用 PUT 方法返回 404

Question

我正在尝试使用休息控制器将商品添加到购物车。向 localhost:8080/rest/cart/add/P1234 发送 PUT 以使用新商品更新购物车时，我不断收到 404 错误。还没有找到解决这个问题的任何东西。
使用 Postman 时，我刚刚获得了登录重定向，这让我产生了考虑安全性的想法……在禁用所有安全组件后，代码可以正常工作。
谁能指出我做错了什么来解决这个问题？

我正在使用 Spring Boot，我的 WebSecurityConfig.java 如下：

@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(securedEnabled = true, proxyTargetClass = true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private UserDetailsService customUserDetailsService;

    @Autowired
    private DataSource dataSource;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth
                .userDetailsService(customUserDetailsService)
                .passwordEncoder(passwordEncoder());
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .headers()
                .frameOptions().sameOrigin()
                .and()
                .authorizeRequests()
                .antMatchers("/js/**", "/css/**", "/images/**").permitAll()
                .antMatchers("/").permitAll()
                .antMatchers("/admin/**").hasRole("ADMIN")
                .anyRequest().authenticated()
                .and()
                .formLogin()
                .loginPage("/login")
                .defaultSuccessUrl("/home")
                .failureUrl("/login?error")
                .permitAll()
                .and()
                .logout()
                .logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
                .logoutSuccessUrl("/login?logout")
                .deleteCookies("my-remember-me-cookie")
                .permitAll()
                .and()
                .exceptionHandling()
                .accessDeniedPage("/403")
        ;
    }
}

控制器：

@RestController
@RequestMapping("rest/cart")
public class CartRestController {
    private static Log log = LogFactory.getLog(ProductController.class);
    @Autowired
    private CartService cartService;
...
@PutMapping("/add/{productId}")
    @ResponseStatus(value = HttpStatus.OK)
    public void addItem(@PathVariable("productId") String productId, HttpSession session) {
        log.info(">> received add request for " + productId);
        cartService.addItem(session.getId(), productId);
    }
}

控制器.js

var cartApp = angular.module('cartApp', []);

cartApp.controller('cartCtrl', function($scope, $http) {



    $scope.addToCart = function(productId) {
        console.log("adding to Cart: " + productId);
        $http.put('/rest/cart/add/' + productId)
            .success(function(data) {
                alert("Product Successfully added to the Cart!");
            });
    };

});

最后，使用 thymeleaf 的 html：

<a href="#" class="btn btn-warning btn-large"  th:attr="ng-click='addToCart(\'' + ${product.productId}+ '\')'">
                        <span class="glyphicon-shopping-cart glyphicon"></span> [[#{button.orderNow}]]
                    </a>

标签： javaspring-bootspring-security