61 lines
2.5 KiB
Java
61 lines
2.5 KiB
Java
package site.easystartup.web.security;
|
|
|
|
import lombok.RequiredArgsConstructor;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.security.authentication.AuthenticationManager;
|
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
|
import site.easystartup.web.service.CustomUserDetailService;
|
|
|
|
@EnableWebSecurity
|
|
@RequiredArgsConstructor
|
|
@EnableGlobalMethodSecurity(
|
|
securedEnabled = true,
|
|
jsr250Enabled = true,
|
|
prePostEnabled = true
|
|
)
|
|
public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
|
private final CustomUserDetailService customUserDetailService;
|
|
private final JWTAuthenticationEntryPoint jwtAuthenticationEntryPoint;
|
|
private final JWTFilter jwtFilter;
|
|
|
|
@Override
|
|
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
|
|
auth.userDetailsService(customUserDetailService).passwordEncoder(bCryptPasswordEncoder());
|
|
}
|
|
|
|
@Override
|
|
protected void configure(HttpSecurity http) throws Exception {
|
|
http.cors().and().csrf().disable()
|
|
.exceptionHandling().authenticationEntryPoint(jwtAuthenticationEntryPoint)
|
|
.and()
|
|
.sessionManagement()
|
|
.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
|
|
.and()
|
|
.authorizeRequests()
|
|
.antMatchers(SecurityConstants.SIGN_UP_URLS).permitAll()
|
|
.anyRequest().authenticated().and()
|
|
.antMatcher("/auth/*").anonymous();
|
|
http.addFilterBefore(jwtFilter, UsernamePasswordAuthenticationFilter.class);
|
|
|
|
}
|
|
|
|
@Bean
|
|
@Override
|
|
public AuthenticationManager authenticationManagerBean() throws Exception {
|
|
return super.authenticationManagerBean();
|
|
}
|
|
|
|
@Bean
|
|
BCryptPasswordEncoder bCryptPasswordEncoder() {
|
|
return new BCryptPasswordEncoder();
|
|
}
|
|
}
|