BAEL-1556

2018-02-16 22:31:53 +01:00
parent 49d880bf58
commit 9dd6ca9179
10 changed files with 177 additions and 4 deletions
@@ -0,0 +1,38 @@
+package com.baeldung.springsecuritythymeleaf;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
+
+@Configuration
+@EnableWebSecurity
+public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
+
+	@Override
+    protected void configure(HttpSecurity http) throws Exception {
+        http
+            .authorizeRequests()
+                .anyRequest().authenticated()
+                .and()
+            .formLogin()
+                .loginPage("/login")
+                .permitAll().failureUrl("/loginError").successForwardUrl("/index")
+                .and()
+            .logout()
+                .permitAll()
+                .logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
+                .logoutSuccessUrl("/login");
+    }
+
+    @Autowired
+	public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+            .inMemoryAuthentication()
+                .withUser("user").password("password").roles("USER").and()
+                .withUser("admin").password("admin").roles("ADMIN");
+    }
+}
@@ -0,0 +1,12 @@
+package com.baeldung.springsecuritythymeleaf;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class SpringSecurityThymeleafApplication {
+
+	public static void main(String[] args) {
+		SpringApplication.run(SpringSecurityThymeleafApplication.class, args);
+	}
+}
@@ -0,0 +1,24 @@
+package com.baeldung.springsecuritythymeleaf;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+@Controller
+public class ViewController {
+	
+	@RequestMapping("/login")
+	public String login() {
+		return "login";
+	}
+	
+	@RequestMapping({"/index", "/"})
+	public String index() {
+		return "index";
+	}
+	
+	@RequestMapping("/loginError")
+	public String loginError() {
+		return "loginError";
+	}
+
+}
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+<head>
+<title>Welcome to Spring Security Thymeleaf tutorial</title>
+</head>
+<body>
+	<h2>Welcome</h2>
+	<p>Spring Security Thymeleaf tutorial</p>
+	<div sec:authorize="hasRole('USER')">Text visible to user.</div>
+	<div sec:authorize="hasRole('ADMIN')">Text visible to admin.</div>
+</body>
+</html>
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+<head>
+<title>Insert title here</title>
+</head>
+<body>
+	<h2>Custom Login Page</h2>
+	<form th:action="@{/login}" method="post">
+		<label for="username">Username</label>: <input type="text"
+			id="username" name="username" autofocus="autofocus" /> <br /> <label
+			for="password">Password</label>: <input type="password" id="password"
+			name="password" /> <br /> <input type="submit" value="Log in" />
+	</form>
+</body>
+</html>
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html xmlns:th="http://www.thymeleaf.org">
+<head>
+<title>Login error page</title>
+</head>
+<body>
+	<h2>Login Error Page</h2>
+</body>
+</html>