diff --git a/src/main/java/com/example/demo/security/config/WebSecurityConfig.java b/src/main/java/com/example/demo/security/config/WebSecurityConfig.java index 72b110d..8c9032a 100644 --- a/src/main/java/com/example/demo/security/config/WebSecurityConfig.java +++ b/src/main/java/com/example/demo/security/config/WebSecurityConfig.java @@ -4,36 +4,38 @@ import lombok.AllArgsConstructor; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpMethod; import org.springframework.security.authentication.dao.DaoAuthenticationProvider; -import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; +import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; +import org.springframework.security.config.Customizer; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; -import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.web.SecurityFilterChain; @Configuration @AllArgsConstructor @EnableWebSecurity -public class WebSecurityConfig extends WebSecurityConfigurerAdapter { +public class WebSecurityConfig { private final AppUserService appUserService; private final BCryptPasswordEncoder bCryptPasswordEncoder; - @Override - protected void configure(HttpSecurity http) throws Exception { + @Bean + protected SecurityFilterChain configure(HttpSecurity http) throws Exception { http - .csrf().disable() - .authorizeRequests() - .antMatchers("/api/v*/registration/**") - .permitAll() - .anyRequest() - .authenticated().and() - .formLogin(); - } - - @Override - protected void configure(AuthenticationManagerBuilder auth) throws Exception { - auth.authenticationProvider(daoAuthenticationProvider()); + .authorizeHttpRequests(customizer -> + customizer + .requestMatchers(HttpMethod.POST, "/api/v*/registration/**") + .permitAll() + .anyRequest() + .authenticated() + ) + .csrf(AbstractHttpConfigurer::disable) + .formLogin(Customizer.withDefaults()) + .authenticationProvider(daoAuthenticationProvider()); + + return http.build(); } @Bean