2martens/wahlrecht
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix security filter chain

Browse Source
This commit is contained in:
2martens
2023-07-10 22:16:05 +02:00
parent 7da7413b5d
commit 440279d1ab
1 changed files with 15 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module-server/src/main/java/de/twomartens/wahlrecht/configuration/WebSecurityConfiguration.java
+15 -14
View File
@@ -13,29 +13,30 @@ import org.springframework.security.provisioning.InMemoryUserDetailsManager;
import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.SecurityFilterChain;
@Configuration @Configuration
@EnableWebSecurity // (1) @EnableWebSecurity
public class WebSecurityConfiguration { public class WebSecurityConfiguration {
public static final String ROLE_USER = "USER"; public static final String ROLE_USER = "USER";
@Bean @Bean
public SecurityFilterChain securityFilterChain(@NonNull HttpSecurity http) throws Exception { // (2) public SecurityFilterChain securityFilterChain(@NonNull HttpSecurity http) throws Exception {
http http
.csrf().disable()
.authorizeHttpRequests() .authorizeHttpRequests()
.requestMatchers("/wahlrecht/v1/**", "/wahlrecht/version") .requestMatchers("/wahlrecht/v1/election", "/wahlrecht/v1/party/**",
.permitAll() "/wahlrecht/v1/nomination/**")
.and() .authenticated()
.and()
.authorizeHttpRequests() .authorizeHttpRequests()
.requestMatchers("/resources/**") .requestMatchers("/wahlrecht/v1/**", "/wahlrecht/version",
.permitAll() "/error")
.and() .permitAll()
.and()
.authorizeHttpRequests() .authorizeHttpRequests()
.requestMatchers("/wahlrecht/v1/election", .requestMatchers("/resources/**")
"/wahlrecht/v1/party/**", .permitAll()
"/wahlrecht/v1/nomination/**") .and()
.authenticated() // (3) .httpBasic();
.and()
.httpBasic(); // (7)
return http.build(); return http.build();
} }