Commit c463511

committed

Introduced authorization

1 parent 29959f0 commit c463511Copy full SHA for c463511

File tree

+19

-2

lines changed

+19

-2

lines changed

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -11,5 +11,6 @@ public class MvcConfig implements WebMvcConfigurer {`
`11`	`11`	`public void addViewControllers(ViewControllerRegistry registry) {`
`12`	`12`	`registry.addViewController("/").setViewName("home");`
`13`	`13`	`registry.addViewController("/login").setViewName("login");`
	`14`	`+ registry.addViewController("/admin").setViewName("admin");`
`14`	`15`	`}`
`15`	`16`	`}`

Lines changed: 8 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -1,10 +1,13 @@`
`1`	`1`	`package com.naturalprogrammer.spring5tutorial.config;`
`2`	`2`
`3`	`3`	`import org.springframework.context.annotation.Configuration;`
	`4`	`+import org.springframework.http.HttpMethod;`
	`5`	`+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;`
`4`	`6`	`import org.springframework.security.config.annotation.web.builders.HttpSecurity;`
`5`	`7`	`import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;`
`6`	`8`
`7`	`9`	`@Configuration`
	`10`	`+@EnableGlobalMethodSecurity(prePostEnabled=true)`
`8`	`11`	`public class SecurityConfig extends WebSecurityConfigurerAdapter {`
`9`	`12`
`10`	`13`	`// @formatter:off`
`@@ -13,6 +16,11 @@ protected void configure(HttpSecurity http) throws Exception {`
`13`	`16`
`14`	`17`	`http`
`15`	`18`	`.authorizeRequests()`
	`19`	`+ .mvcMatchers(HttpMethod.GET, "/").permitAll()`
	`20`	`+ .mvcMatchers("/signup",`
	`21`	`+ "/forgot-password",`
	`22`	`+ "/reset-password/*").permitAll()`
	`23`	`+ .mvcMatchers("/admin/**").hasRole("ADMIN")`
`16`	`24`	`.anyRequest().authenticated()`
`17`	`25`	`.and()`
`18`	`26`	`.formLogin().loginPage("/login").permitAll()`

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,6 @@`
	`1`	`+<%@ page language="java" contentType="text/html; charset=utf-8" pageEncoding="utf-8"%>`
	`2`	`+<%@include file="includes/header.jsp"%>`
	`3`	`+`
	`4`	`+Hello, ADMIN!`
	`5`	`+`
	`6`	`+<%@include file="includes/footer.jsp"%>`

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -91,8 +91,10 @@`
`91`	`91`	`</li>`
`92`	`92`	`<li><a href="#">Another action</a></li>`
`93`	`93`	`<li><a href="#">Something else here</a></li>`
`94`		`- <li role="separator" class="divider"></li>`
`95`		`- <li><a href="#">Separated link</a></li>`
	`94`	`+ <sec:authorize access="hasRole('ADMIN')">`
	`95`	`+ <li role="separator" class="divider"></li>`
	`96`	`+ <li><a href="/admin">Admin</a></li>`
	`97`	`+ </sec:authorize>`
`96`	`98`	`</ul>`
`97`	`99`	`</li>`
`98`	`100`	`</sec:authorize>`

Comments

(0)