From 6e0485068fccb264c294612c015cd4e00d76c310 Mon Sep 17 00:00:00 2001 From: Muhammad Usman <105865001+m-usman-24@users.noreply.github.com> Date: Thu, 20 Jul 2023 02:12:37 +0500 Subject: [PATCH] Update WebSecurityConfig.java WebSecurityConfigurerAdapter this guy is deprecated so changing it to SecurityFilterChain which is recommended --- .../security/config/WebSecurityConfig.java | 36 ++++++++++--------- 1 file changed, 19 insertions(+), 17 deletions(-) diff --git a/src/main/java/com/example/demo/security/config/WebSecurityConfig.java b/src/main/java/com/example/demo/security/config/WebSecurityConfig.java index 72b110d..8c9032a 100644 --- a/src/main/java/com/example/demo/security/config/WebSecurityConfig.java +++ b/src/main/java/com/example/demo/security/config/WebSecurityConfig.java @@ -4,36 +4,38 @@ import lombok.AllArgsConstructor; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpMethod; import org.springframework.security.authentication.dao.DaoAuthenticationProvider; -import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; +import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; +import org.springframework.security.config.Customizer; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; -import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.web.SecurityFilterChain; @Configuration @AllArgsConstructor @EnableWebSecurity -public class WebSecurityConfig extends WebSecurityConfigurerAdapter { +public class WebSecurityConfig { private final AppUserService appUserService; private final BCryptPasswordEncoder bCryptPasswordEncoder; - @Override - protected void configure(HttpSecurity http) throws Exception { + @Bean + protected SecurityFilterChain configure(HttpSecurity http) throws Exception { http - .csrf().disable() - .authorizeRequests() - .antMatchers("/api/v*/registration/**") - .permitAll() - .anyRequest() - .authenticated().and() - .formLogin(); - } - - @Override - protected void configure(AuthenticationManagerBuilder auth) throws Exception { - auth.authenticationProvider(daoAuthenticationProvider()); + .authorizeHttpRequests(customizer -> + customizer + .requestMatchers(HttpMethod.POST, "/api/v*/registration/**") + .permitAll() + .anyRequest() + .authenticated() + ) + .csrf(AbstractHttpConfigurer::disable) + .formLogin(Customizer.withDefaults()) + .authenticationProvider(daoAuthenticationProvider()); + + return http.build(); } @Bean