diff --git a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java index 1c893c1..3467cc7 100644 --- a/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java +++ b/boot-starter/boot-starter-security/boot-starter-security-browser/src/main/java/com/micro/fast/security/browser/config/BrowserSecurityConfig.java @@ -140,6 +140,12 @@ public class BrowserSecurityConfig extends WebSecurityConfigurerAdapter { .expiredSessionStrategy(sessionInformationExpiredStrategy) .and() .and() + .logout() + .logoutUrl("/logout") + .logoutSuccessUrl("自定义退出登录后访问的url") //如果不配置的话就会跳向登录处理url + .deleteCookies("删除浏览器上指定的cookie") +// .logoutSuccessHandler() 定义登出成功处理器,并做一定的处理。这个登出处理器会覆盖掉logoutSuccessUrl的配置 + .and() .authorizeRequests()//下面是权限配置 //当访问这个页面的时候不进行身份认证,对用户自定义的登录页也不进行权限认证 .antMatchers(SecurityConstants.MOBILE_LOGIN_PROCESSOR_URI diff --git a/boot-starter/boot-starter-security/boot-starter-security-core/README.md b/boot-starter/boot-starter-security/boot-starter-security-core/README.md index b14ec19..1fb2e4f 100644 --- a/boot-starter/boot-starter-security/boot-starter-security-core/README.md +++ b/boot-starter/boot-starter-security/boot-starter-security-core/README.md @@ -43,3 +43,5 @@ weChat 第三方登录 - `ms.security.session.maxSessionPreventsLogin`达到最大session时,是否阻止新的登录请求,默认为false,不阻止,新的登录将老的登 录失效掉 - `ms.security.session.sessionInvalidUrl`session失效的时候跳转的地址 +### 退出登录 +- 默认的退出登录请求的url是`/logout`,退出登录的时候会删除用户session中的信息和记住我存入数据库中的信息然后默认跳转到登录的url