diff --git a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt index c2e4a79..d8db690 100644 --- a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt +++ b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt @@ -21,22 +21,14 @@ class WebSecurityConfig () { @Bean @Throws(Exception::class) fun filterChain(http: HttpSecurity): SecurityFilterChain? { - http - .authorizeHttpRequests(Customizer { auth -> - auth - .anyRequest().authenticated() - } - ) + http.authorizeHttpRequests(Customizer { auth -> + auth.anyRequest().authenticated() }) .oauth2ResourceServer(Customizer { oauth2 -> - oauth2!! - .jwt(Customizer.withDefaults()) - } // ← проверяем JWT токен - ) + oauth2!!.jwt(Customizer.withDefaults()) + }) // ← проверяем JWT токен .sessionManagement(Customizer { session: SessionManagementConfigurer? -> - session!! - .sessionCreationPolicy(SessionCreationPolicy.STATELESS) - } // без сессий - ) + session!!.sessionCreationPolicy(SessionCreationPolicy.STATELESS) + }) // без сессий .csrf(Customizer { csrf: CsrfConfigurer? -> csrf!!.disable() }) // отключаем CSRF для API return http.build() diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml index 8839942..8992878 100644 --- a/src/main/resources/application.yaml +++ b/src/main/resources/application.yaml @@ -30,6 +30,9 @@ spring: # Keycloak Security security: oauth2: + resourceserver: + jwt: + issuer-uri: https://keycloak.dmitriy-churmeev.tech/realms/test_realm client: registration: keycloak: