1515import org .springframework .security .crypto .password .PasswordEncoder ;
1616import org .springframework .security .oauth2 .jwt .JwtDecoder ;
1717import org .springframework .security .web .SecurityFilterChain ;
18- import org .springframework .security .web .servlet .util .matcher .MvcRequestMatcher ;
1918import org .springframework .web .servlet .handler .HandlerMappingIntrospector ;
2019
2120import io .hexlet .blog .service .CustomUserDetailsService ;
@@ -36,18 +35,15 @@ public class SecurityConfig {
3635 @ Bean
3736 public SecurityFilterChain securityFilterChain (HttpSecurity http , HandlerMappingIntrospector introspector )
3837 throws Exception {
39- // TODO: remove after merge
40- // https://github.com/spring-projects/spring-security/issues/13568#issuecomment-1645059215
41- var mvcMatcherBuilder = new MvcRequestMatcher .Builder (introspector );
4238 return http
4339 .csrf (csrf -> csrf .disable ())
4440 .authorizeHttpRequests (auth -> auth
45- .requestMatchers (mvcMatcherBuilder . pattern ( "/api/login" ) ).permitAll ()
46- .requestMatchers (mvcMatcherBuilder . pattern ( "/api/pages/*" ) ).permitAll ()
47- .requestMatchers (mvcMatcherBuilder . pattern ( "/api/pages" ) ).permitAll ()
48- .requestMatchers (mvcMatcherBuilder . pattern ( "/" ) ).permitAll ()
49- .requestMatchers (mvcMatcherBuilder . pattern ( "/index.html" ) ).permitAll ()
50- .requestMatchers (mvcMatcherBuilder . pattern ( "/assets/**" ) ).permitAll ()
41+ .requestMatchers ("/api/login" ).permitAll ()
42+ .requestMatchers ("/api/pages/*" ).permitAll ()
43+ .requestMatchers ("/api/pages" ).permitAll ()
44+ .requestMatchers ("/" ).permitAll ()
45+ .requestMatchers ("/index.html" ).permitAll ()
46+ .requestMatchers ("/assets/**" ).permitAll ()
5147 .anyRequest ().authenticated ())
5248 .sessionManagement (session -> session .sessionCreationPolicy (SessionCreationPolicy .STATELESS ))
5349 .oauth2ResourceServer ((rs ) -> rs .jwt ((jwt ) -> jwt .decoder (jwtDecoder )))
0 commit comments