DIGITAL_TELECOMUNICACIONES/TEST
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

se añadio jwt en el backend
Some checks failed
Deploy Spring Boot App / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
unknown
2026-04-18 10:32:13 -04:00
parent e16c80ea8e
commit 6cf84336a2
11 changed files with 498 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
src/main/java/com/example/fercoganbackend/configuration/SecurityConfig.java
View File

@@ -1,26 +1,26 @@
package com.example.fercoganbackend.configuration;
import com.example.fercoganbackend.service.UsuarioDetailsService;
import jakarta.servlet.http.HttpServletResponse;
import com.example.fercoganbackend.security.JwtAuthenticationFilter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.config.http.SessionCreationPolicy;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
@Configuration
public class SecurityConfig {
private final UsuarioDetailsService usuarioDetailsService;
private final JwtAuthenticationFilter jwtAuthenticationFilter;
public SecurityConfig(UsuarioDetailsService usuarioDetailsService) {
this.usuarioDetailsService = usuarioDetailsService;
public SecurityConfig(JwtAuthenticationFilter jwtAuthenticationFilter) {
this.jwtAuthenticationFilter = jwtAuthenticationFilter;
}
@Bean
@@ -39,20 +39,21 @@ public class SecurityConfig {
http
.securityMatcher("/**")
.csrf(AbstractHttpConfigurer::disable)
.sessionManagement(s -> s.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
.httpBasic(AbstractHttpConfigurer::disable)
.authorizeHttpRequests(auth -> auth
.requestMatchers("/ws/**").permitAll() // WebSocket
.requestMatchers(HttpMethod.OPTIONS, "/**").permitAll()
.requestMatchers("/ws/**").permitAll()
.requestMatchers("/auth/**").permitAll()
.requestMatchers(HttpMethod.POST, "/api/usuarios/login").permitAll()
.requestMatchers(HttpMethod.POST, "/api/usuarios/registrar").permitAll()
.requestMatchers("/api/usuarios/confirmado/**").permitAll()
.requestMatchers("/favicon.ico", "/error", "/static/**", "/contador/**", "/api/**").permitAll()
.requestMatchers("/admin/**").hasRole("ADMIN")
.requestMatchers("/favicon.ico", "/error", "/static/**", "/contador/**").permitAll()
.requestMatchers("/admin/**").hasAuthority("ADMIN")
.anyRequest().authenticated()
)
.httpBasic(Customizer.withDefaults());
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
return http.build();
}
}