Код: Выделить всё
package com.example.demo.Configs;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.User.UserBuilder;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
import org.springframework.security.web.SecurityFilterChain;
@Configuration
public class ConfigSecurity {
@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.csrf(csrf -> csrf.disable())
.formLogin(form -> form
.loginPage("/LoginAc")
.loginProcessingUrl("/login")
.defaultSuccessUrl("/", true)
.permitAll()
)
.authorizeHttpRequests(authorize -> authorize
.requestMatchers("/game").permitAll()
.requestMatchers("/css/gameTest.css").permitAll()
.anyRequest().authenticated()
);
return http.build();
}
// @Bean
// public PasswordEncoder passwordEncoder() {
// return new BCryptPasswordEncoder();
// }
@Bean
public UserDetailsService userDetailsService() {
UserBuilder users = User.withDefaultPasswordEncoder();
InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
manager.createUser(users.username("user").password("12345").roles("USER").build());
manager.createUser(users.username("admin").password("12345").roles("ADMIN").build());
return manager;
}
}
Дайте мне совет, любые источники. Помогите мне изучить Spring Security.
Подробнее здесь: https://stackoverflow.com/questions/797 ... g-security