|
| 1 | +package com.reuben.store.config; |
| 2 | + |
| 3 | + |
| 4 | +import org.springframework.beans.factory.annotation.Autowired; |
| 5 | +import org.springframework.context.annotation.Bean; |
| 6 | +import org.springframework.context.annotation.Configuration; |
| 7 | +import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; |
| 8 | +import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
| 9 | +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; |
| 10 | +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
| 11 | +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
| 12 | +import org.springframework.security.crypto.password.PasswordEncoder; |
| 13 | + |
| 14 | +@Configuration |
| 15 | +@EnableWebSecurity |
| 16 | +public class SecurityConfig extends WebSecurityConfigurerAdapter { |
| 17 | + |
| 18 | + @Autowired //Could not autowire. No beans of 'PasswordEncoder' type found. |
| 19 | + private PasswordEncoder passwordEncoder; |
| 20 | + |
| 21 | + @Override |
| 22 | + protected void configure(AuthenticationManagerBuilder auth) throws Exception { |
| 23 | + auth.inMemoryAuthentication() |
| 24 | + .passwordEncoder(passwordEncoder) |
| 25 | + .withUser("reuben").password(passwordEncoder.encode("1234")).authorities("ADMIN") |
| 26 | + .and() |
| 27 | + .withUser("rhea").password(passwordEncoder.encode("rhea")).authorities("USER"); |
| 28 | + } |
| 29 | + |
| 30 | + @Override |
| 31 | + protected void configure(HttpSecurity http) throws Exception { |
| 32 | + http.authorizeRequests() |
| 33 | + .antMatchers("/api/public/test").permitAll() |
| 34 | + .antMatchers("/api/private/user/test").authenticated() |
| 35 | + .antMatchers("/api/private/admin/test").hasAuthority("ADMIN")// hasAnyAuthority("ADMIN","USER") |
| 36 | + .and() |
| 37 | + .httpBasic(); |
| 38 | + http.csrf().disable(); |
| 39 | + http.cors().disable(); |
| 40 | + } |
| 41 | + |
| 42 | + |
| 43 | + @Bean |
| 44 | + public PasswordEncoder getPasswordEncoder() { |
| 45 | + return new BCryptPasswordEncoder(); |
| 46 | + } |
| 47 | +} |
0 commit comments