From 1f52669b52fb4853a883338cad1998a8ff6d0df1 Mon Sep 17 00:00:00 2001
From: "ran.shang" <>
Date: Wed, 8 Apr 2026 09:26:57 +0800
Subject: [PATCH] fix

---
 .../java/com/senmesh/security/config/WebSecurityConfigurer.java | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java b/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
index 6e1b2bd..18c5e91 100644
--- a/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
+++ b/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
@@ -151,6 +151,8 @@ public class WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
 
     // 禁用CSRF
 //    http.csrf().disable();
+    http.csrf(c -> c.ignoringAntMatchers("/login"))  // 登录接口免 CSRF
+    ;
     http.headers().frameOptions().deny();
     http.headers().xssProtection().block(true);
     http.headers().contentTypeOptions();