com.lennonjesus.auth.security.SecurityConfiguration.java Source code

Introduction

Here is the source code for com.lennonjesus.auth.security.SecurityConfiguration.java

Source

/**
 *  Guick Generate class: https://github.com/wdavilaneto/guick
 *  Author: service-wdavilaneto@redhat.com
 *  This source is free under The Apache Software License, Version 2.0
 *  license url http://www.apache.org/licenses/LICENSE-2.0.txt
 */
package com.lennonjesus.auth.security;

import com.lennonjesus.auth.security.handler.AjaxAuthenticationFailureHandler;
import com.lennonjesus.auth.security.handler.AjaxAuthenticationSuccessHandler;
import com.lennonjesus.auth.security.handler.AjaxLogoutSuccessHandler;
import com.lennonjesus.auth.security.provider.SecurityAuthenticationProvider;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;

import javax.annotation.Resource;

/**
 * Application Security Configuration
 */
@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Resource
    private AjaxAuthenticationSuccessHandler ajaxAuthenticationSuccessHandler;

    @Resource
    private AjaxAuthenticationFailureHandler ajaxAuthenticationFailureHandler;

    @Resource
    private AjaxLogoutSuccessHandler ajaxLogoutSuccessHandler;

    @Resource
    private Http401UnauthorizedEntryPoint authenticationEntryPoint;

    @Resource
    SecurityAuthenticationProvider securityAuthenticationProvider;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(securityAuthenticationProvider);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.httpBasic().realmName("com.lennonjesus").and().exceptionHandling()
                .authenticationEntryPoint(authenticationEntryPoint).and().authorizeRequests().antMatchers("/")
                .permitAll().and().formLogin().loginProcessingUrl("/api/authentication")
                .successHandler(ajaxAuthenticationSuccessHandler).failureHandler(ajaxAuthenticationFailureHandler)
                .permitAll().and().logout().logoutUrl("/api/logout").logoutSuccessHandler(ajaxLogoutSuccessHandler)
                .deleteCookies("JSESSIONID").permitAll().and().authorizeRequests()
                .antMatchers("/api/authentication").permitAll().antMatchers("/api/authenticate").permitAll()
                //                .antMatchers("/api/v2/api-docs").permitAll()
                //                .antMatchers("/api/**").hasAnyAuthority("ROLE_USER")
                .anyRequest().authenticated().and().csrf().disable().headers().frameOptions().disable();

        //        .usernameParameter("j_username")
        //                .passwordParameter("j_password")
    }

    //    @EnableGlobalMethodSecurity(prePostEnabled = true, jsr250Enabled = true)
    //    private static class GlobalSecurityConfiguration extends GlobalMethodSecurityConfiguration {
    //    }

}