DmitriyChurmeev/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix security configuration
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse Source
This commit is contained in:
dmitriy.churmeev
2026-03-29 12:56:45 +03:00
parent 0871801106
commit 94ddfd86c6
2 changed files with 10 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
src/main/kotlin/com/auth/config/WebSecurityConfig.kt
View File

@@ -5,11 +5,8 @@ import org.springframework.context.annotation.Configuration
import org.springframework.security.config.Customizer
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity
import org.springframework.security.config.annotation.web.configurers.AuthorizeHttpRequestsConfigurer.AuthorizationManagerRequestMatcherRegistry
import org.springframework.security.config.annotation.web.configurers.CsrfConfigurer
import org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurer
import org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer
import org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer.JwtConfigurer
import org.springframework.security.config.http.SessionCreationPolicy
import org.springframework.security.web.SecurityFilterChain
@@ -34,47 +31,4 @@ class WebSecurityConfig () {
return http.build()
}
// @Bean
// @Throws(Exception::class)
// fun filterChain(http: HttpSecurity): SecurityFilterChain? {
// http
// .authorizeHttpRequests(Customizer { auth ->
// auth
// .requestMatchers("/public/**").permitAll()
// .anyRequest().authenticated()
// }
// )
// .oauth2ResourceServer(Customizer { oauth2 ->
// oauth2!!
// .jwt(Customizer.withDefaults())
// } // ← проверяем JWT токены
// )
// .sessionManagement(Customizer { session: SessionManagementConfigurer<HttpSecurity?>? ->
// session!!
// .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
// } // REST API без сессий
// )
// .csrf(Customizer { csrf: CsrfConfigurer<HttpSecurity?>? -> csrf!!.disable() }) // для API отключаем CSRF
//
// return http.build()
// }
// @Bean
// @Throws(Exception::class)
// fun filterChain(http: HttpSecurity): SecurityFilterChain? {
// http
// .authorizeHttpRequests(Customizer { auth -> auth
// .requestMatchers("/", "/home").permitAll()
// .anyRequest().authenticated()
// })
// .oauth2Login(Customizer { oauth2: OAuth2LoginConfigurer<HttpSecurity?>? ->
// oauth2!!
// .defaultSuccessUrl("/dashboard", true)
// .loginPage("/oauth2/authorization/keycloak") } // Spring сам редиректит
// ).logout(Customizer { logout: LogoutConfigurer<HttpSecurity?>? ->
// logout!!
// .logoutSuccessUrl("/") })
//
// return http.build()
// }
}

24
src/main/resources/application.yaml
View File

@@ -33,13 +33,15 @@ spring:
resourceserver:
jwt:
issuer-uri: https://keycloak.dmitriy-churmeev.tech/realms/test_realm
client:
registration:
keycloak:
client-id: test_client
client-secret: jyO0RTH9dzPaschkpfjzwZ6WprTlMPZ6
# scope: openid,profile,email
redirect-uri: http://app.dmitriy-churmeev.tech/login/oauth2/code/keycloak
# Для использования клиентской сессии
# client:
# registration:
# keycloak:
# client-id: test_client
# client-secret: jyO0RTH9dzPaschkpfjzwZ6WprTlMPZ6
# redirect-uri: http://app.dmitriy-churmeev.tech/login/oauth2/code/keycloak
provider:
keycloak:
issuer-uri: https://keycloak.dmitriy-churmeev.tech/realms/test_realm
@@ -49,10 +51,4 @@ spring:
flyway:
enabled: true
locations: classpath:db/migration
baseline-on-migrate: true
#keycloak:
# auth-server-url: http://keycloak.dmitriy-churmeev.tech/auth
# realm: test_realm
# resource: test_client
# public-client: true
baseline-on-migrate: true