53 lines
2.4 KiB
Java
53 lines
2.4 KiB
Java
package com.example.nto.security;
|
|
|
|
import com.example.nto.service.DatabaseUserDetailsService;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.security.config.Customizer;
|
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
import org.springframework.security.core.userdetails.User;
|
|
import org.springframework.security.core.userdetails.UserDetails;
|
|
import org.springframework.security.core.userdetails.UserDetailsService;
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
|
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
|
|
import org.springframework.security.web.SecurityFilterChain;
|
|
import org.springframework.security.web.util.matcher.RequestMatcher;
|
|
import org.springframework.util.AntPathMatcher;
|
|
|
|
@EnableWebSecurity
|
|
public class SecurityConfig {
|
|
|
|
@Autowired
|
|
DatabaseUserDetailsService userDetailsService;
|
|
|
|
@Bean
|
|
public SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
|
|
httpSecurity
|
|
.authorizeRequests(auth -> auth
|
|
.antMatchers("/swagger-ui/**",
|
|
"/swagger-ui.html",
|
|
"/v3/**",
|
|
"/test/**",
|
|
"/h2-console/**").permitAll()
|
|
.antMatchers("/api/admin/**").hasRole("ADMIN")
|
|
.anyRequest().authenticated()
|
|
)
|
|
.csrf(AbstractHttpConfigurer::disable)
|
|
.httpBasic(Customizer.withDefaults())
|
|
.userDetailsService(userDetailsService)
|
|
.sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS));
|
|
|
|
return httpSecurity.build();
|
|
}
|
|
|
|
@Bean
|
|
public PasswordEncoder passwordEncoder() {
|
|
return new BCryptPasswordEncoder(8);
|
|
}
|
|
}
|