fix security configuration
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful

This commit is contained in:
dmitriy.churmeev
2026-03-29 02:06:19 +03:00
parent 57fffb3a5a
commit 82eef21b7d
2 changed files with 9 additions and 14 deletions

View File

@@ -21,22 +21,14 @@ class WebSecurityConfig () {
@Bean
@Throws(Exception::class)
fun filterChain(http: HttpSecurity): SecurityFilterChain? {
http
.authorizeHttpRequests(Customizer { auth ->
auth
.anyRequest().authenticated()
}
)
http.authorizeHttpRequests(Customizer { auth ->
auth.anyRequest().authenticated() })
.oauth2ResourceServer(Customizer { oauth2 ->
oauth2!!
.jwt(Customizer.withDefaults())
} // ← проверяем JWT токен
)
oauth2!!.jwt(Customizer.withDefaults())
}) // ← проверяем JWT токен
.sessionManagement(Customizer { session: SessionManagementConfigurer<HttpSecurity?>? ->
session!!
.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
} // без сессий
)
session!!.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
}) // без сессий
.csrf(Customizer { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() }) // отключаем CSRF для API
return http.build()

View File

@@ -30,6 +30,9 @@ spring:
# Keycloak Security
security:
oauth2:
resourceserver:
jwt:
issuer-uri: https://keycloak.dmitriy-churmeev.tech/realms/test_realm
client:
registration:
keycloak: