Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-26 13:53:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

WebSecurityConfigurerAdapter JavaDoc

Browse Source 
Closes gh-8784
This commit is contained in:
Romil Patel 2020-07-11 11:44:47 +05:30 committed by Josh Cummings
parent 7e7f85c18c
commit 0c85dd9cd1
No known key found for this signature in database
GPG Key ID: 49EF60DD7FF83443
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
config/src/main/java/org/springframework/security/config/annotation/web/configuration/WebSecurityConfigurerAdapter.java
View File

@ -332,6 +332,15 @@ public abstract class WebSecurityConfigurerAdapter implements
/** /**
* Override this method to configure {@link WebSecurity}. For example, if you wish to * Override this method to configure {@link WebSecurity}. For example, if you wish to
* ignore certain requests. * ignore certain requests.
*
* Endpoint used in this method ignores the
* spring security filters, headers, csrf etc. see
* {@link org.springframework.security.config.annotation.web.configurers.HeadersConfigurer} and
* {@link org.springframework.security.config.annotation.web.configurers.CsrfConfigurer }
*
* Instead, if you want to protect public endpoints against common vulnerabilities, then see
* {@link #configure(HttpSecurity)} and the {@link HttpSecurity#authorizeRequests}
* configuration method.
*/ */
public void configure(WebSecurity web) throws Exception { public void configure(WebSecurity web) throws Exception {
} }
@ -345,6 +354,10 @@ public abstract class WebSecurityConfigurerAdapter implements
* http.authorizeRequests().anyRequest().authenticated().and().formLogin().and().httpBasic(); * http.authorizeRequests().anyRequest().authenticated().and().formLogin().and().httpBasic();
* </pre> * </pre>
* *
* Public endpoints that require defense against common vulnerabilities can be specified here.
* See {@link HttpSecurity#authorizeRequests} and the `permitAll()` authorization rule
* for more details.
*
* @param http the {@link HttpSecurity} to modify * @param http the {@link HttpSecurity} to modify
* @throws Exception if an error occurs * @throws Exception if an error occurs
*/ */