update 优化 过期的 Security 方法

ruoyi-extend/ruoyi-monitor-admin/src/main/java/org/dromara/monitor/admin/config/SecurityConfig.java

@@ -3,10 +3,14 @@ package org.dromara.monitor.admin.config;
 import de.codecentric.boot.admin.server.config.AdminServerProperties;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
+import org.springframework.security.config.annotation.web.configurers.HeadersConfigurer;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
+import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
 
 /**
  * admin 监控 安全配置
@@ -30,22 +34,22 @@ public class SecurityConfig {
         successHandler.setDefaultTargetUrl(adminContextPath + "/");
 
         return httpSecurity
-                .headers().frameOptions().disable()
+            .headers((header) ->
-                .and().authorizeHttpRequests()
+                header.frameOptions(HeadersConfigurer.FrameOptionsConfig::disable))
-                .requestMatchers(adminContextPath + "/assets/**"
+            .authorizeHttpRequests((authorize) ->
-                    , adminContextPath + "/login"
+                authorize.requestMatchers(
-                    , "/actuator"
+                        new AntPathRequestMatcher(adminContextPath + "/assets/**"),
-                    , "/actuator/**"
+                        new AntPathRequestMatcher(adminContextPath + "/login"),
+                        new AntPathRequestMatcher("/actuator"),
+                        new AntPathRequestMatcher("/actuator/**")
                     ).permitAll()
-                .anyRequest().authenticated()
+                    .anyRequest().authenticated())
-                .and()
+            .formLogin((formLogin) ->
-                .formLogin().loginPage(adminContextPath + "/login")
+                formLogin.loginPage(adminContextPath + "/login").successHandler(successHandler))
-                .successHandler(successHandler).and()
+            .logout((logout) ->
-                .logout().logoutUrl(adminContextPath + "/logout")
+                logout.logoutUrl(adminContextPath + "/logout"))
-                .and()
+            .httpBasic(Customizer.withDefaults())
-                .httpBasic().and()
+            .csrf(AbstractHttpConfigurer::disable)
-                .csrf()
-                .disable()
             .build();
     }