un nuevo beans
Some checks failed
Deploy Spring Boot App / build-and-deploy (push) Has been cancelled

This commit is contained in:
2025-10-01 18:08:45 -04:00
parent e0e6f08db9
commit 042588cb6e

View File

@@ -7,6 +7,7 @@ import org.springframework.context.annotation.Configuration;
import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration; import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer; import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.security.crypto.password.PasswordEncoder;
@@ -31,13 +32,18 @@ public class SecurityConfig {
return authConfig.getAuthenticationManager(); return authConfig.getAuthenticationManager();
} }
@Bean
public WebSecurityCustomizer webSecurityCustomizer() {
return (web) -> web.ignoring().requestMatchers("/ws/**");
}
@Bean @Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http http
.csrf(AbstractHttpConfigurer::disable) .csrf(AbstractHttpConfigurer::disable)
.authorizeHttpRequests(auth -> auth .authorizeHttpRequests(auth -> auth
.requestMatchers("/auth/**").permitAll() .requestMatchers("/auth/**").permitAll()
.requestMatchers("/favicon.ico", "/error", "/static/**","contador/**", "/api/**").permitAll() .requestMatchers("/favicon.ico", "/error", "/static/**","/contador/**", "/api/**").permitAll()
.requestMatchers("/ws/**").permitAll() // permitir WS sin auth .requestMatchers("/ws/**").permitAll() // permitir WS sin auth
.requestMatchers("/admin/**").hasAnyAuthority("SUPER_USUARIO","ADMIN") .requestMatchers("/admin/**").hasAnyAuthority("SUPER_USUARIO","ADMIN")
.anyRequest().authenticated() .anyRequest().authenticated()