80 lines
3.7 KiB
Java
80 lines
3.7 KiB
Java
package com.example.nto.config;
|
|
|
|
import com.example.nto.model.entity.Employee;
|
|
import com.example.nto.repository.EmployeeRepository;
|
|
import lombok.RequiredArgsConstructor;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.boot.sql.init.dependency.DependsOnDatabaseInitialization;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.security.authentication.AuthenticationManager;
|
|
import org.springframework.security.authentication.AuthenticationProvider;
|
|
import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
|
|
import org.springframework.security.config.Customizer;
|
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
|
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
|
|
import org.springframework.security.config.annotation.web.configurers.AbstractAuthenticationFilterConfigurer;
|
|
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
|
|
import org.springframework.security.core.userdetails.UserDetailsService;
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
|
import org.springframework.security.crypto.factory.PasswordEncoderFactories;
|
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
|
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
|
|
import org.springframework.security.web.SecurityFilterChain;
|
|
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
|
|
|
|
import javax.servlet.DispatcherType;
|
|
|
|
@Configuration
|
|
@EnableWebSecurity
|
|
@EnableGlobalMethodSecurity(prePostEnabled = true)
|
|
public class SecurityConfig {
|
|
|
|
@Autowired
|
|
private EmployeeRepository employeeRepository;
|
|
|
|
@Bean
|
|
@DependsOnDatabaseInitialization
|
|
public UserDetailsService userDetailsService(){
|
|
InMemoryUserDetailsManager inMemoryUserDetailsManager = new InMemoryUserDetailsManager();
|
|
for (Employee employee : employeeRepository.findAll()) {
|
|
inMemoryUserDetailsManager.createUser(employee);
|
|
}
|
|
return inMemoryUserDetailsManager;
|
|
}
|
|
|
|
@Bean
|
|
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
|
|
return http.csrf().disable()
|
|
.authorizeHttpRequests(auth -> auth
|
|
.anyRequest().authenticated())
|
|
.logout((logout) -> logout.logoutUrl("/api/logout"))
|
|
.httpBasic(Customizer.withDefaults())
|
|
.build();
|
|
}
|
|
|
|
@Bean
|
|
public AuthenticationProvider authenticationProvider() {
|
|
DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
|
|
provider.setUserDetailsService(userDetailsService());
|
|
provider.setPasswordEncoder(passwordEncoder());
|
|
return provider;
|
|
}
|
|
|
|
@Bean
|
|
public AuthenticationManager authenticationManager(HttpSecurity http) throws Exception {
|
|
AuthenticationManagerBuilder authenticationManagerBuilder =
|
|
http.getSharedObject(AuthenticationManagerBuilder.class);
|
|
authenticationManagerBuilder.userDetailsService(userDetailsService());
|
|
return authenticationManagerBuilder.build();
|
|
}
|
|
|
|
@Bean
|
|
public PasswordEncoder passwordEncoder() {
|
|
return new BCryptPasswordEncoder();
|
|
}
|
|
} |