Java Code Examples for org.springframework.security.config.annotation.web.builders.HttpSecurity#httpBasic()

@Override
protected void configure(HttpSecurity http) throws Exception {

  // Page with login form is served as /login.html and does a POST on /login
  http.formLogin().loginPage("/login.html").loginProcessingUrl("/login").permitAll();
  // The UI does a POST on /logout on logout
  http.logout().logoutUrl("/logout").logoutSuccessUrl("/login.html");
  // The ui currently doesn't support csrf
  http.csrf().disable();

  http.headers().frameOptions().disable();
  // Requests for the login page and the static assets are allowed
  http.authorizeRequests().antMatchers("/**/ui/**", "/**/css/**", "/**/js/**", "/**/images/**")
      .permitAll();
  // ... and any other request needs to be authorized
  http.authorizeRequests().antMatchers("/**").authenticated();

  // Enable so that the clients can authenticate via HTTP basic for registering
  http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity security) throws Exception {
	if (!this.isInboundAuthSecurityEnabled()) {
		security.httpBasic().disable();
		return;
	}

	HttpSecurity sec = security;
	sec = this.determineHttpSecurityForEndpoint(sec, EndpointConstants.ENDPOINT_PATH_DISCOVERY, this.discoveryAuth);
	sec = this.determineHttpSecurityForEndpoint(sec, EndpointConstants.ENDPOINT_PATH_SINGLE_ENDPOINT_SCRAPING, this.endpointAuth);
	sec = this.determineHttpSecurityForEndpoint(sec, EndpointConstants.ENDPOINT_PATH_SINGLE_TARGET_SCRAPING+"/**", this.endpointAuth);
	sec = this.determineHttpSecurityForEndpoint(sec, EndpointConstants.ENDPOINT_PATH_PROMREGATOR_METRICS, this.promregatorMetricsAuth);
	sec = this.determineHttpSecurityForEndpoint(sec, EndpointConstants.ENDPOINT_PATH_CACHE_INVALIDATION, this.cacheInvalidateAuth);

	
	// see also https://github.com/spring-projects/spring-security/issues/4242
	security.requestCache().requestCache(this.newHttpSessionRequestCache());
	
	// see also
	// https://www.boraji.com/spring-security-4-http-basic-authentication-example
	sec.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests()
        .antMatchers("/hystrix*").permitAll()
        .anyRequest()
        .fullyAuthenticated();
    http.httpBasic();
    http.csrf().disable();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {

	configureUrlAuthorization(http);

	// Disable CSRF protection (it is difficult to implement with ng2)
	http.csrf().disable();

	// Use Http Basic Authentication
	http.httpBasic();

	// Do not redirect when logout
	http.logout().logoutSuccessHandler((rq, rs, a) -> {
	});
}
 

@Override
        protected void configure(HttpSecurity http) throws Exception {
            final String uiPrefix = "/ui/";
            final String loginUrl = uiPrefix + "login.html";

            TokenAuthFilterConfigurer<HttpSecurity> tokenFilterConfigurer =
                    new TokenAuthFilterConfigurer<>(new RequestTokenHeaderRequestMatcher(),
                            new TokenAuthProvider(tokenValidator, userDetailsService, authProcessor));
            http.csrf().disable()
                    .authenticationProvider(provider).userDetailsService(userDetailsService)
                    .anonymous().principal(SecurityUtils.USER_ANONYMOUS).and()
                    .authorizeRequests().antMatchers(uiPrefix + "/token/login").permitAll()
                    .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()//allow CORS option calls
                    .antMatchers(uiPrefix + "**").authenticated()
                    .and().headers().cacheControl().disable()
                    .and().formLogin().loginPage(loginUrl).permitAll().defaultSuccessUrl(uiPrefix)
                    .and().logout().logoutUrl(uiPrefix + "logout").logoutSuccessUrl(loginUrl)
                    .and().apply(tokenFilterConfigurer);
//                enable after testing
//                        .and().sessionManagement()
//                        .sessionCreationPolicy(SessionCreationPolicy.STATELESS);

            // X-Frame-Options
            http.headers()
              .frameOptions().sameOrigin();

            http.addFilterAfter(new AccessContextFilter(aclContextFactory), SwitchUserFilter.class);

            //we use basic in testing and scripts
            if (basicAuthEnable) {
                http.httpBasic();
            }

        }
 

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.csrf().disable();
    http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    http.httpBasic();
    http
            .authorizeRequests()
            .antMatchers("/user").hasRole("ADMIN")
            .and().exceptionHandling().accessDeniedPage("/access-denied");
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
  http.httpBasic();
  http.csrf().disable();
  http.authorizeRequests().antMatchers("/").permitAll().and()
      .authorizeRequests().antMatchers("/console/**").permitAll();

  http.headers().frameOptions().disable();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
  http.httpBasic();
  http.csrf().disable();
  http.authorizeRequests().antMatchers("/").permitAll().and()
      .authorizeRequests().antMatchers("/console/**").permitAll();

  http.headers().frameOptions().disable();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
  http.httpBasic();
  http.csrf().disable();
  http.headers().frameOptions().sameOrigin();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	http.httpBasic();
	http.authorizeRequests().anyRequest().authenticated();
}