Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- package ru.gurzhiy.springsecurityjwt;
- import org.springframework.context.annotation.Bean;
- import org.springframework.security.authentication.AuthenticationManager;
- import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
- import org.springframework.security.config.annotation.web.builders.HttpSecurity;
- import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
- import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
- import org.springframework.security.config.http.SessionCreationPolicy;
- import org.springframework.security.crypto.password.NoOpPasswordEncoder;
- import org.springframework.security.crypto.password.PasswordEncoder;
- import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
- import ru.gurzhiy.springsecurityjwt.filters.JwtRequestFilter;
- import ru.gurzhiy.springsecurityjwt.service.MyUserDetailsService;
- @EnableWebSecurity
- public class SecurityConfigurer extends WebSecurityConfigurerAdapter {
- private final MyUserDetailsService myUserDetailsService;
- private final JwtRequestFilter jwtRequestFilter;
- public SecurityConfigurer(MyUserDetailsService myUserDetailsService, JwtRequestFilter jwtRequestFilter) {
- this.myUserDetailsService = myUserDetailsService;
- this.jwtRequestFilter = jwtRequestFilter;
- }
- @Override
- protected void configure(AuthenticationManagerBuilder auth) throws Exception {
- auth.userDetailsService(myUserDetailsService);
- }
- @Override
- protected void configure(HttpSecurity http) throws Exception {
- http.csrf().disable()
- .authorizeRequests().antMatchers("/authenticate").permitAll()
- .anyRequest().authenticated()
- .and().sessionManagement()
- .sessionCreationPolicy(SessionCreationPolicy.STATELESS);
- http.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class);
- }
- @Bean
- @Override
- protected AuthenticationManager authenticationManager() throws Exception {
- return super.authenticationManager();
- }
- //todo я в курсе что это треш, но еду по гайду индуса :)
- @Bean
- public PasswordEncoder passwordEncoder() {
- return NoOpPasswordEncoder.getInstance();
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement