2martens
/
wahlrecht
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix security filter chain

This commit is contained in:
Jim Martens 2023-07-10 22:16:05 +02:00
parent 7da7413b5d
commit 440279d1ab
1 changed files with 15 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
module-server/src/main/java/de/twomartens/wahlrecht/configuration/WebSecurityConfiguration.java
View File

@ -13,29 +13,30 @@ import org.springframework.security.provisioning.InMemoryUserDetailsManager;
import org.springframework.security.web.SecurityFilterChain;
@Configuration
@EnableWebSecurity // (1)
@EnableWebSecurity
public class WebSecurityConfiguration {
public static final String ROLE_USER = "USER";
@Bean
public SecurityFilterChain securityFilterChain(@NonNull HttpSecurity http) throws Exception { // (2)
public SecurityFilterChain securityFilterChain(@NonNull HttpSecurity http) throws Exception {
http
.csrf().disable()
.authorizeHttpRequests()
.requestMatchers("/wahlrecht/v1/**", "/wahlrecht/version")
.permitAll()
.and()
.requestMatchers("/wahlrecht/v1/election", "/wahlrecht/v1/party/**",
"/wahlrecht/v1/nomination/**")
.authenticated()
.and()
.authorizeHttpRequests()
.requestMatchers("/resources/**")
.permitAll()
.and()
.requestMatchers("/wahlrecht/v1/**", "/wahlrecht/version",
"/error")
.permitAll()
.and()
.authorizeHttpRequests()
.requestMatchers("/wahlrecht/v1/election",
"/wahlrecht/v1/party/**",
"/wahlrecht/v1/nomination/**")
.authenticated() // (3)
.and()
.httpBasic(); // (7)
.requestMatchers("/resources/**")
.permitAll()
.and()
.httpBasic();
return http.build();
}