Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

WebFluxSecurityConfiguration defaults HTTP Basic 

Fixes gh-4346
This commit is contained in:
Rob Winch 2017-05-19 21:50:06 -05:00
parent 1cec497a50
commit 247635ed92
4 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/src/main/java/org/springframework/security/config/annotation/web/reactive/WebFluxSecurityConfiguration.java
View File

@ -62,6 +62,7 @@ public class WebFluxSecurityConfiguration implements WebFluxConfigurer {
@Bean @Bean
public HttpSecurity httpSecurity() { public HttpSecurity httpSecurity() {
HttpSecurity http = http(); HttpSecurity http = http();
http.httpBasic();
http.authenticationManager(authenticationManager()); http.authenticationManager(authenticationManager());
http.securityContextRepository(new WebSessionSecurityContextRepository()); http.securityContextRepository(new WebSessionSecurityContextRepository());
return http; return http;

6
config/src/main/java/org/springframework/security/config/web/server/HttpSecurity.java
View File

@ -96,6 +96,12 @@ public class HttpSecurity {
.flatMap( r -> Optional.of(new SecurityContextRepositoryWebFilter(r))); .flatMap( r -> Optional.of(new SecurityContextRepositoryWebFilter(r)));
} }
public class HttpBasicSpec extends HttpBasicBuilder {
public HttpSecurity disable() {
httpBasic = null;
return HttpSecurity.this;
}
}
private HttpSecurity() {} private HttpSecurity() {}
} }

2
samples/javaconfig/hellowebflux/src/main/java/sample/SecurityConfig.java
View File

@ -36,8 +36,6 @@ public class SecurityConfig {
@Bean @Bean
WebFilter springSecurityFilterChain(HttpSecurity http) throws Exception { WebFilter springSecurityFilterChain(HttpSecurity http) throws Exception {
http.httpBasic();
http.authorizeExchange() http.authorizeExchange()
.antMatchers("/admin/**").hasRole("ADMIN") .antMatchers("/admin/**").hasRole("ADMIN")
.antMatchers("/users/{user}/**").access(this::currentUserMatchesPath) .antMatchers("/users/{user}/**").access(this::currentUserMatchesPath)

2
samples/javaconfig/hellowebfluxfn/src/main/java/sample/SecurityConfig.java
View File

@ -36,8 +36,6 @@ public class SecurityConfig {
@Bean @Bean
WebFilter springSecurityFilterChain(HttpSecurity http) throws Exception { WebFilter springSecurityFilterChain(HttpSecurity http) throws Exception {
http.httpBasic();
http.authorizeExchange() http.authorizeExchange()
.antMatchers("/admin/**").hasRole("ADMIN") .antMatchers("/admin/**").hasRole("ADMIN")
.antMatchers("/users/{user}/**").access(this::currentUserMatchesPath) .antMatchers("/users/{user}/**").access(this::currentUserMatchesPath)