Commit dcec528

committed

add spring security

1 parent fec3bc8 commit dcec528Copy full SHA for dcec528

File tree

+49

-1

lines changed

+49

-1

lines changed

Lines changed: 9 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,10 @@`
`38`	`38`	`<groupId>org.springframework.boot</groupId>`
`39`	`39`	`<artifactId>spring-boot-starter-web</artifactId>`
`40`	`40`	`</dependency>`
	`41`	`+ <dependency>`
	`42`	`+ <groupId>org.springframework.boot</groupId>`
	`43`	`+ <artifactId>spring-boot-starter-security</artifactId>`
	`44`	`+ </dependency>`
`41`	`45`	`<dependency>`
`42`	`46`	`<groupId>mysql</groupId>`
`43`	`47`	`<artifactId>mysql-connector-java</artifactId>`
`@@ -57,6 +61,11 @@`
`57`	`61`	`<artifactId>spring-boot-starter-test</artifactId>`
`58`	`62`	`<scope>test</scope>`
`59`	`63`	`</dependency>`
	`64`	`+ <dependency>`
	`65`	`+ <groupId>org.springframework.security</groupId>`
	`66`	`+ <artifactId>spring-security-test</artifactId>`
	`67`	`+ <scope>test</scope>`
	`68`	`+ </dependency>`
`60`	`69`	`<dependency>`
`61`	`70`	`<groupId>com.h2database</groupId>`
`62`	`71`	`<artifactId>h2</artifactId>`

Lines changed: 35 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,35 @@`
	`1`	`+package com.taskagile.config;`
	`2`	`+`
	`3`	`+import org.springframework.security.config.annotation.web.builders.HttpSecurity;`
	`4`	`+import org.springframework.security.config.annotation.web.builders.WebSecurity;`
	`5`	`+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;`
	`6`	`+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;`
	`7`	`+`
	`8`	`+@EnableWebSecurity`
	`9`	`+public class SecurityConfiguration extends WebSecurityConfigurerAdapter {`
	`10`	`+`
	`11`	`+ private static final String[] PUBLIC = new String[]{`
	`12`	`+ "/error", "/login", "/logout", "/register", "/api/registrations"};`
	`13`	`+`
	`14`	`+ @Override`
	`15`	`+ protected void configure(HttpSecurity http) throws Exception {`
	`16`	`+ http`
	`17`	`+ .authorizeRequests()`
	`18`	`+ .antMatchers(PUBLIC).permitAll()`
	`19`	`+ .anyRequest().authenticated()`
	`20`	`+ .and()`
	`21`	`+ .formLogin()`
	`22`	`+ .loginPage("/login")`
	`23`	`+ .and()`
	`24`	`+ .logout()`
	`25`	`+ .logoutUrl("/logout")`
	`26`	`+ .logoutSuccessUrl("/login?logged-out")`
	`27`	`+ .and()`
	`28`	`+ .csrf().disable();`
	`29`	`+ }`
	`30`	`+`
	`31`	`+ @Override`
	`32`	`+ public void configure(WebSecurity web) {`
	`33`	`+ web.ignoring().antMatchers("/static/", "/js/", "/css/", "/images/", "/favicon.ico");`
	`34`	`+ }`
	`35`	`+}`

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -4,3 +4,4 @@ spring.datasource.password=<password>`
`4`	`4`	`spring.datasource.driver-class-name=com.mysql.jdbc.Driver`
`5`	`5`
`6`	`6`	`logging.level.com.taskagile=DEBUG`
	`7`	`+logging.level.org.springframework.security=DEBUG`

Lines changed: 4 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,6 @@`
`1`	`1`	`package com.taskagile.web.apis;`
`2`	`2`
	`3`	`+import com.taskagile.config.SecurityConfiguration;`
`3`	`4`	`import com.taskagile.domain.application.UserService;`
`4`	`5`	`import com.taskagile.domain.model.user.EmailAddressExistsException;`
`5`	`6`	`import com.taskagile.domain.model.user.UsernameExistsException;`
`@@ -11,6 +12,7 @@`
`11`	`12`	`import org.springframework.boot.test.autoconfigure.web.servlet.WebMvcTest;`
`12`	`13`	`import org.springframework.boot.test.mock.mockito.MockBean;`
`13`	`14`	`import org.springframework.http.MediaType;`
	`15`	`+import org.springframework.test.context.ContextConfiguration;`
`14`	`16`	`import org.springframework.test.context.junit4.SpringRunner;`
`15`	`17`	`import org.springframework.test.web.servlet.MockMvc;`
`16`	`18`
`@@ -21,7 +23,8 @@`
`21`	`23`	`import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;`
`22`	`24`
`23`	`25`	`@RunWith(SpringRunner.class)`
`24`		`-@WebMvcTest(RegistrationApiController.class)`
	`26`	`+@ContextConfiguration(classes = {SecurityConfiguration.class, RegistrationApiController.class})`
	`27`	`+@WebMvcTest`
`25`	`28`	`public class RegistrationApiControllerTests {`
`26`	`29`
`27`	`30`	`@Autowired`

Comments

(0)