From 6c52ec56cc92c3232772363988f6ceed4336d1d2 Mon Sep 17 00:00:00 2001
From: "dmitriy.churmeev" <dmitriy.churmeev@gmail.com>
Date: Sun, 29 Mar 2026 15:20:51 +0300
Subject: [PATCH] fix security configuration

---
 .../com/auth/config/WebSecurityConfig.kt       | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
index 070c865..66a7616 100644
--- a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
+++ b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
@@ -16,8 +16,8 @@ import org.springframework.security.web.SecurityFilterChain
 @Configuration
 @EnableWebSecurity
 @EnableMethodSecurity(
-    prePostEnabled = true,  // ← явно включаем
-    securedEnabled = true    // ← опционально
+    prePostEnabled = true,
+    securedEnabled = true
 )
 class WebSecurityConfig () {
 
@@ -26,24 +26,24 @@ class WebSecurityConfig () {
     @Bean
     @Throws(Exception::class)
     fun filterChain(http: HttpSecurity): SecurityFilterChain? {
-        http.authorizeHttpRequests(Customizer { auth ->
+        http.authorizeHttpRequests { auth ->
 
             auth.requestMatchers("/public/**", "/health", "/info").permitAll()
             //auth.anyRequest().permitAll()
             auth.anyRequest().authenticated()
 
-        })
-            .oauth2ResourceServer(Customizer { oauth2 ->
+        }
+            .oauth2ResourceServer { oauth2 ->
               //  oauth2!!.jwt(Customizer.withDefaults())
                 // добавляем конвертер для извлечения ролей
                 oauth2.jwt { jwt ->
                     jwt.jwtAuthenticationConverter(jwtAuthenticationConverter())
                 }
-            }) // проверка JWT токен
-            .sessionManagement(Customizer { session: SessionManagementConfigurer<HttpSecurity?>? ->
+            } // проверка JWT токен
+            .sessionManagement { session: SessionManagementConfigurer<HttpSecurity?>? ->
                 session!!.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
-            }) // без сессий
-            .csrf(Customizer { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() }) // отключаем CSRF для API
+            } // без сессий
+            .csrf { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() } // отключаем CSRF для API
 
         return http.build()
     }