Upgrade Spring Boot 2.0.2 → 2.7.18, add Spring Security, fix insecure HTTP URLs

pom.xml

@@ -5,13 +5,13 @@
 
     <groupId>org.springframework</groupId>
     <artifactId>gs-spring-boot</artifactId>
-    <packaging>pom</packaging>
+    <packaging>jar</packaging>
     <version>0.1.0</version>
 
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>2.0.2.RELEASE</version>
+        <version>2.7.18</version>
     </parent>
 
     <dependencies>
@@ -32,6 +32,10 @@
             <groupId>com.h2database</groupId>
             <artifactId>h2</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-security</artifactId>
+        </dependency>
     </dependencies>
 
     <properties>

src/main/java/hello/Application.java

@@ -36,8 +36,12 @@ public static void main(String[] args) {
         }
 
         RestTemplate restTemplate =  new RestTemplate();
-        Quote quote = restTemplate.getForObject("http://gturnquist-quoters.cfapps.io/api/random", Quote.class);
-        log.info(quote.toString());
+        try {
+            Quote quote = restTemplate.getForObject("https://gturnquist-quoters.cfapps.io/api/random", Quote.class);
+            log.info(quote.toString());
+        } catch (Exception e) {
+            log.warn("Could not reach external quote service: {}", e.getMessage());
+        }
     }
 
 
@@ -49,9 +53,13 @@ public RestTemplate restTemplate(RestTemplateBuilder builder) {
     @Bean
     public CommandLineRunner run(RestTemplate restTemplate) throws Exception {
         return args -> {
-            Quote quote = restTemplate.getForObject(
-                    "http://gturnquist-quoters.cfapps.io/api/random", Quote.class);
-            log.info(quote.toString());
+            try {
+                Quote quote = restTemplate.getForObject(
+                        "https://gturnquist-quoters.cfapps.io/api/random", Quote.class);
+                log.info(quote.toString());
+            } catch (Exception e) {
+                log.warn("Could not reach external quote service: {}", e.getMessage());
+            }
         };
     }
 
@@ -80,8 +88,9 @@ public void run(String... args) throws Exception {
 
         log.info("Querying for customer records where first_name = 'Josh':");
         jdbcTemplate.query(
-                "SELECT id, first_name, last_name FROM customers WHERE first_name = ?", new Object[]{"Josh"},
-                (rs, rowNum) -> new Customer(rs.getLong("id"), rs.getString("first_name"), rs.getString("last_name"))
+                "SELECT id, first_name, last_name FROM customers WHERE first_name = ?",
+                (rs, rowNum) -> new Customer(rs.getLong("id"), rs.getString("first_name"), rs.getString("last_name")),
+                "Josh"
         ).forEach(customer -> log.info(customer.toString()));
 
     }

src/main/java/hello/config/SecurityConfig.java

@@ -0,0 +1,26 @@
+package hello.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+@EnableWebSecurity
+public class SecurityConfig {
+
+    @Bean
+    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
+        http
+            .authorizeRequests()
+                .antMatchers(HttpMethod.GET, "/", "/greeting").permitAll()
+                .anyRequest().authenticated()
+                .and()
+            .httpBasic()
+                .and()
+            .csrf().disable(); // Disable CSRF for REST API; consider enabling if serving browser forms
+        return http.build();
+    }
+}

src/main/resources/application.properties

@@ -0,0 +1,4 @@
+#server.port = 8081
+
+spring.h2.console.enabled=true
+spring.datasource.url=jdbc:h2:mem:testdb