61 lines
2.3 KiB
Java
61 lines
2.3 KiB
Java
package be.naaturel.letsmeet.configurations;
|
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
|
|
import org.springframework.security.config.annotation.web.configurers.LogoutConfigurer;
|
|
import org.springframework.security.web.SecurityFilterChain;
|
|
import org.springframework.transaction.annotation.EnableTransactionManagement;
|
|
import org.springframework.web.cors.CorsConfiguration;
|
|
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
|
|
import org.springframework.web.filter.CorsFilter;
|
|
|
|
import java.util.Arrays;
|
|
|
|
@Configuration
|
|
@EnableWebSecurity
|
|
@EnableTransactionManagement
|
|
public class AppSecurity {
|
|
|
|
private final AppConfigurations conf;
|
|
|
|
@Autowired
|
|
public AppSecurity(AppConfigurations appConf) {
|
|
this.conf = appConf;
|
|
}
|
|
|
|
@Bean
|
|
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
|
|
|
|
return http
|
|
.cors(cors -> {
|
|
})
|
|
.csrf(AbstractHttpConfigurer::disable)
|
|
.authorizeHttpRequests((requests) -> requests
|
|
.requestMatchers("/**").permitAll()
|
|
//.anyRequest().authenticated()
|
|
)
|
|
.formLogin((form) -> form
|
|
.defaultSuccessUrl("/", true)
|
|
.permitAll()
|
|
)
|
|
.logout(LogoutConfigurer::permitAll)
|
|
.build();
|
|
}
|
|
|
|
@Bean
|
|
public CorsFilter corsFilter() {
|
|
|
|
CorsConfiguration config = new CorsConfiguration();
|
|
config.setAllowedOrigins(Arrays.asList(conf.authorizedHosts));
|
|
config.setAllowedMethods(Arrays.asList(conf.authorizedMethods));
|
|
config.setAllowedHeaders(Arrays.asList(conf.authorizedHeaders));
|
|
|
|
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
|
|
source.registerCorsConfiguration("/**", config);
|
|
return new CorsFilter(source);
|
|
}
|
|
} |