SecurityConfig.java 2.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061
  1. /*
  2. * Copyright 2002-2018 the original author or authors.
  3. *
  4. * Licensed under the Apache License, Version 2.0 (the "License");
  5. * you may not use this file except in compliance with the License.
  6. * You may obtain a copy of the License at
  7. *
  8. * http://www.apache.org/licenses/LICENSE-2.0
  9. *
  10. * Unless required by applicable law or agreed to in writing, software
  11. * distributed under the License is distributed on an "AS IS" BASIS,
  12. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13. * See the License for the specific language governing permissions and
  14. * limitations under the License.
  15. */
  16. package sample.config;
  17. import org.springframework.context.annotation.Bean;
  18. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  19. import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  20. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  21. import org.springframework.security.core.userdetails.User;
  22. import org.springframework.security.core.userdetails.UserDetails;
  23. import org.springframework.security.core.userdetails.UserDetailsService;
  24. import org.springframework.security.oauth2.client.OAuth2AuthorizedClientService;
  25. import org.springframework.security.oauth2.client.web.AuthenticatedPrincipalOAuth2AuthorizedClientRepository;
  26. import org.springframework.security.oauth2.client.web.OAuth2AuthorizedClientRepository;
  27. import org.springframework.security.provisioning.InMemoryUserDetailsManager;
  28. /**
  29. * @author Joe Grandja
  30. */
  31. @EnableWebSecurity
  32. public class SecurityConfig extends WebSecurityConfigurerAdapter {
  33. @Override
  34. protected void configure(HttpSecurity http) throws Exception {
  35. http
  36. .authorizeRequests()
  37. .anyRequest().authenticated()
  38. .and()
  39. .formLogin()
  40. .and()
  41. .oauth2Client();
  42. }
  43. @Bean
  44. public OAuth2AuthorizedClientRepository authorizedClientRepository(OAuth2AuthorizedClientService authorizedClientService) {
  45. return new AuthenticatedPrincipalOAuth2AuthorizedClientRepository(authorizedClientService);
  46. }
  47. @Bean
  48. public UserDetailsService userDetailsService() {
  49. UserDetails userDetails = User.withDefaultPasswordEncoder()
  50. .username("user")
  51. .password("password")
  52. .roles("USER")
  53. .build();
  54. return new InMemoryUserDetailsManager(userDetails);
  55. }
  56. }