DmitriyChurmeev/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix security configuration
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse Source
This commit is contained in:
dmitriy.churmeev
2026-03-29 12:56:45 +03:00
parent 0871801106
commit 94ddfd86c6
2 changed files with 10 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
src/main/kotlin/com/auth/config/WebSecurityConfig.kt
View File

@@ -5,11 +5,8 @@ import org.springframework.context.annotation.Configuration
import org.springframework.security.config.Customizer
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity
import org.springframework.security.config.annotation.web.configurers.AuthorizeHttpRequestsConfigurer.AuthorizationManagerRequestMatcherRegistry
import org.springframework.security.config.annotation.web.configurers.CsrfConfigurer
import org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurer
import org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer
import org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer.JwtConfigurer
import org.springframework.security.config.http.SessionCreationPolicy
import org.springframework.security.web.SecurityFilterChain
@@ -34,47 +31,4 @@ class WebSecurityConfig () {
return http.build()
}
// @Bean
// @Throws(Exception::class)
// fun filterChain(http: HttpSecurity): SecurityFilterChain? {
// http
// .authorizeHttpRequests(Customizer { auth ->
// auth
// .requestMatchers("/public/**").permitAll()
// .anyRequest().authenticated()
// }
// )
// .oauth2ResourceServer(Customizer { oauth2 ->
// oauth2!!
// .jwt(Customizer.withDefaults())
// } // ← проверяем JWT токены
// )
// .sessionManagement(Customizer { session: SessionManagementConfigurer<HttpSecurity?>? ->
// session!!
// .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
// } // REST API без сессий
// )
// .csrf(Customizer { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() }) // для API отключаем CSRF
//
// return http.build()
// }
// @Bean
// @Throws(Exception::class)
// fun filterChain(http: HttpSecurity): SecurityFilterChain? {
// http
// .authorizeHttpRequests(Customizer { auth -> auth
// .requestMatchers("/", "/home").permitAll()
// .anyRequest().authenticated()
// })
// .oauth2Login(Customizer { oauth2: OAuth2LoginConfigurer<HttpSecurity?>? ->
// oauth2!!
// .defaultSuccessUrl("/dashboard", true)
// .loginPage("/oauth2/authorization/keycloak") } // Spring сам редиректит
// ).logout(Customizer { logout: LogoutConfigurer<HttpSecurity?>? ->
// logout!!
// .logoutSuccessUrl("/") })
//
// return http.build()
// }
}