DIGITAL_TELECOMUNICACIONES/TEST
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ajuste de pujas
Some checks failed
Deploy Spring Boot App / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
andre00bejarano00vaca
2025-12-05 09:42:29 -04:00
parent f1077c108c
commit 8d06e6d023
6 changed files with 42 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
src/main/java/com/example/fercoganbackend/configuration/SecurityConfig.java
View File

@@ -5,6 +5,7 @@ import jakarta.servlet.http.HttpServletResponse;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
@@ -32,32 +33,24 @@ public class SecurityConfig {
return authConfig.getAuthenticationManager();
}
@Bean
public WebSecurityCustomizer webSecurityCustomizer() {
return (web) -> web.ignoring().requestMatchers("/ws/**");
}
@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.securityMatcher("/**")
.csrf(AbstractHttpConfigurer::disable)
.authorizeHttpRequests(auth -> auth
.requestMatchers("/ws/**").permitAll() // WebSocket
.requestMatchers("/auth/**").permitAll()
.requestMatchers("/favicon.ico", "/error", "/static/**","/contador/**", "/api/**").permitAll()
.requestMatchers("/ws/**").permitAll() // permitir WS sin auth
.requestMatchers("/admin/**").hasAnyAuthority("SUPER_USUARIO","ADMIN")
.requestMatchers("/favicon.ico", "/error", "/static/**", "/contador/**", "/api/**").permitAll()
.anyRequest().authenticated()
)
.httpBasic(httpBasic -> httpBasic
.authenticationEntryPoint((request, response, authException) -> {
// Log del fallo de autenticación
System.out.println("Fallo de autenticación: " + authException.getMessage());
response.sendError(HttpServletResponse.SC_UNAUTHORIZED, authException.getMessage());
})
);
.httpBasic(Customizer.withDefaults());
return http.build();
}
}