Integra panel admin en seguridad y corrige carga de usuarios con JWT2

src/main/java/com/example/fercoganbackend/configuration/SecurityConfig.java

@@ -49,6 +49,7 @@ public class SecurityConfig {
                         .requestMatchers(HttpMethod.POST, "/api/usuarios/registrar").permitAll()
                         .requestMatchers("/api/usuarios/**").permitAll()
                         .requestMatchers("/favicon.ico", "/error", "/static/**", "/contador/**").permitAll()
+                        .requestMatchers("/panel", "/panel/**").permitAll()
                         .requestMatchers("/admin/**").hasAuthority("ADMIN")
                         .anyRequest().authenticated()
                 )

src/main/java/com/example/fercoganbackend/configuration/SpaPanelConfig.java

@@ -0,0 +1,31 @@
+package com.example.fercoganbackend.configuration;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.core.io.Resource;
+import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import org.springframework.web.servlet.resource.PathResourceResolver;
+
+import java.io.IOException;
+
+@Configuration
+public class SpaPanelConfig implements WebMvcConfigurer {
+
+    @Override
+    public void addResourceHandlers(ResourceHandlerRegistry registry) {
+        registry.addResourceHandler("/panel/**")
+                .addResourceLocations("classpath:/static/panel/")
+                .resourceChain(true)
+                .addResolver(new PathResourceResolver() {
+                    @Override
+                    protected Resource getResource(String resourcePath, Resource location) throws IOException {
+                        Resource requested = location.createRelative(resourcePath);
+                        if (requested.exists() && requested.isReadable()) {
+                            return requested;
+                        }
+                        return new ClassPathResource("/static/panel/index.html");
+                    }
+                });
+    }
+}

src/main/java/com/example/fercoganbackend/entity/Usuario.java

@@ -1,5 +1,6 @@
 package com.example.fercoganbackend.entity;
 
+import com.fasterxml.jackson.annotation.JsonProperty;
 import jakarta.persistence.*;
 import java.util.Set;
 
@@ -10,6 +11,7 @@ public class Usuario {
     private Long id;
 
     private String username;
+    @JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
     private String password;
 
     @Column(nullable = false)

src/main/java/com/example/fercoganbackend/service/UsuarioDetailsService.java

@@ -38,13 +38,17 @@ public class UsuarioDetailsService implements UserDetailsService {
         logger.info("Usuario encontrado: {}, aprobado: {}", usuario.getUsername(), usuario.isAprobado());
         logger.info("Roles del usuario: {}", usuario.getRoles());
 
+        var authorities = usuario.getRoles() == null
+                ? List.<SimpleGrantedAuthority>of()
+                : usuario.getRoles().stream()
+                        .map(r -> new SimpleGrantedAuthority(r.name()))
+                        .toList();
+
         return new org.springframework.security.core.userdetails.User(
                 usuario.getUsername(),
                 usuario.getPassword(),
                 usuario.isAprobado(), true, true, true,
-                usuario.getRoles().stream()
+                authorities
-                        .map(r -> new SimpleGrantedAuthority(r.name()))
-                        .toList()
         );
     }
 }