secure-files

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs

commit c7473e118d0bedca2c2ba2c2fbefa8ef6e092d2a
parent 4dd829bbd07f7012e1c6dbee8f0f3acc9e9c0a0b
Author: Kebigon <git@kebigon.xyz>
Date:   Thu, 24 Nov 2022 20:30:12 +0900

Update Spring Boot to version 2.7.5

Diffstat:
Mpom.xml | 2+-
Msrc/main/java/xyz/kebigon/securefiles/WebSecurityConfiguration.java | 21+++++++++++++--------
2 files changed, 14 insertions(+), 9 deletions(-)

diff --git a/pom.xml b/pom.xml @@ -8,7 +8,7 @@ <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> - <version>2.5.4</version> + <version>2.7.5</version> <relativePath /> <!-- lookup parent from repository --> </parent> diff --git a/src/main/java/xyz/kebigon/securefiles/WebSecurityConfiguration.java b/src/main/java/xyz/kebigon/securefiles/WebSecurityConfiguration.java @@ -3,30 +3,33 @@ package xyz.kebigon.securefiles; import org.springframework.beans.factory.annotation.Value; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; -import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; -import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.provisioning.InMemoryUserDetailsManager; +import org.springframework.security.web.SecurityFilterChain; @Configuration @EnableWebSecurity -public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter +public class WebSecurityConfiguration { @Value("${spring.security.user.name}") private String username; @Value("${spring.security.user.password}") private String password; - @Override - protected void configure(final AuthenticationManagerBuilder auth) throws Exception + @Bean + public InMemoryUserDetailsManager userDetailsService() { - auth.inMemoryAuthentication().withUser(username).password(password).roles("USER"); + final UserDetails user = User.withUsername(username).password(password).roles("USER").build(); + return new InMemoryUserDetailsManager(user); } - @Override - protected void configure(final HttpSecurity http) throws Exception + @Bean + public SecurityFilterChain filterChain(final HttpSecurity http) throws Exception { http // .csrf().disable() // @@ -36,6 +39,8 @@ public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter .and() // .formLogin().and() // .httpBasic(); + + return http.build(); } @Bean