JAVA-31190: Preparation for migrating spring-boot-modules to version 3. (#15834)
This commit is contained in:
+4
-4
@@ -8,10 +8,10 @@ import org.springframework.security.core.Authentication;
|
||||
import org.springframework.security.core.context.SecurityContextHolder;
|
||||
import org.springframework.web.filter.OncePerRequestFilter;
|
||||
|
||||
import javax.servlet.FilterChain;
|
||||
import javax.servlet.ServletException;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
import jakarta.servlet.FilterChain;
|
||||
import jakarta.servlet.ServletException;
|
||||
import jakarta.servlet.http.HttpServletRequest;
|
||||
import jakarta.servlet.http.HttpServletResponse;
|
||||
import java.io.IOException;
|
||||
|
||||
public class AuditInterceptor extends OncePerRequestFilter {
|
||||
|
||||
+13
-9
@@ -1,8 +1,8 @@
|
||||
package com.baeldung.permitallanonymous.security;
|
||||
|
||||
import com.baeldung.permitallanonymous.filter.AuditInterceptor;
|
||||
import org.springframework.context.annotation.Bean;
|
||||
import org.springframework.context.annotation.Configuration;
|
||||
import org.springframework.security.config.Customizer;
|
||||
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
||||
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
||||
import org.springframework.security.core.userdetails.User;
|
||||
@@ -12,6 +12,9 @@ import org.springframework.security.crypto.password.PasswordEncoder;
|
||||
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
|
||||
import org.springframework.security.web.SecurityFilterChain;
|
||||
import org.springframework.security.web.authentication.AnonymousAuthenticationFilter;
|
||||
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
|
||||
|
||||
import com.baeldung.permitallanonymous.filter.AuditInterceptor;
|
||||
|
||||
@Configuration
|
||||
@EnableWebSecurity
|
||||
@@ -28,14 +31,15 @@ public class EcommerceWebSecurityConfig {
|
||||
|
||||
@Bean
|
||||
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
|
||||
http.addFilterAfter(new AuditInterceptor(), AnonymousAuthenticationFilter.class)
|
||||
.authorizeRequests()
|
||||
.antMatchers("/private/**").authenticated().and().httpBasic()
|
||||
.and().authorizeRequests()
|
||||
.antMatchers("/public/showProducts").permitAll()
|
||||
.antMatchers("/public/registerUser").anonymous();
|
||||
|
||||
return http.build();
|
||||
return http.addFilterAfter(new AuditInterceptor(), AnonymousAuthenticationFilter.class)
|
||||
.authorizeHttpRequests(request -> request.requestMatchers(new AntPathRequestMatcher("/private/**"))
|
||||
.authenticated())
|
||||
.httpBasic(Customizer.withDefaults())
|
||||
.authorizeHttpRequests(request -> request.requestMatchers(new AntPathRequestMatcher("/public/showProducts"))
|
||||
.permitAll())
|
||||
.authorizeHttpRequests(request -> request.requestMatchers(new AntPathRequestMatcher("/public/registerUser"))
|
||||
.anonymous())
|
||||
.build();
|
||||
}
|
||||
|
||||
@Bean
|
||||
|
||||
Reference in New Issue
Block a user