|
1 | 1 | package com.bezkoder.springjwt.security;
|
2 | 2 |
|
| 3 | +import com.bezkoder.springjwt.security.jwt.AuthEntryPointJwt; |
| 4 | +import com.bezkoder.springjwt.security.jwt.AuthTokenFilter; |
| 5 | +import com.bezkoder.springjwt.security.services.UserDetailsServiceImpl; |
3 | 6 | import org.springframework.beans.factory.annotation.Autowired;
|
4 | 7 | import org.springframework.context.annotation.Bean;
|
5 | 8 | import org.springframework.context.annotation.Configuration;
|
6 | 9 | import org.springframework.security.authentication.AuthenticationManager;
|
7 | 10 | import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
|
8 |
| -//import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; |
9 | 11 | import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
|
10 |
| -import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; |
| 12 | +import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity; |
11 | 13 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
12 |
| -//import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; |
13 |
| -//import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
14 | 14 | import org.springframework.security.config.http.SessionCreationPolicy;
|
15 | 15 | import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
16 | 16 | import org.springframework.security.crypto.password.PasswordEncoder;
|
17 | 17 | import org.springframework.security.web.SecurityFilterChain;
|
18 | 18 | import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
19 | 19 |
|
20 |
| -import com.bezkoder.springjwt.security.jwt.AuthEntryPointJwt; |
21 |
| -import com.bezkoder.springjwt.security.jwt.AuthTokenFilter; |
22 |
| -import com.bezkoder.springjwt.security.services.UserDetailsServiceImpl; |
23 |
| - |
24 | 20 | @Configuration
|
25 |
| -@EnableGlobalMethodSecurity( |
26 |
| - // securedEnabled = true, |
27 |
| - // jsr250Enabled = true, |
28 |
| - prePostEnabled = true) |
| 21 | +@EnableMethodSecurity |
29 | 22 | public class WebSecurityConfig { // extends WebSecurityConfigurerAdapter {
|
30 | 23 | @Autowired
|
31 | 24 | UserDetailsServiceImpl userDetailsService;
|
@@ -84,10 +77,11 @@ public PasswordEncoder passwordEncoder() {
|
84 | 77 | @Bean
|
85 | 78 | public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
|
86 | 79 | http.cors().and().csrf().disable()
|
87 |
| - .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and() |
88 |
| - .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and() |
89 |
| - .authorizeRequests().antMatchers("/api/auth/**").permitAll() |
90 |
| - .antMatchers("/api/test/**").permitAll() |
| 80 | + .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and() |
| 81 | + .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and() |
| 82 | + .authorizeHttpRequests() |
| 83 | + .requestMatchers("/api/auth/**").permitAll() |
| 84 | + .requestMatchers("/api/test/**").permitAll() |
91 | 85 | .anyRequest().authenticated();
|
92 | 86 |
|
93 | 87 | http.authenticationProvider(authenticationProvider());
|
|
0 commit comments