Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix documentation part of Multiple HttpSecurity Instances 

`http.antMatcher()` is not longer available and was replaced with
`http.securityMatcher()`, so use this in the Java Config Multiple
HttpSecurity Instances example, too
This commit is contained in:
Johannes Graf 2022-11-08 12:10:06 +01:00 committed by Marcus Hert Da Coregio
parent fd25568330
commit 8af3b5afe4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/modules/ROOT/pages/servlet/configuration/java.adoc
View File

@ -209,7 +209,7 @@ public class MultiHttpSecurityConfig {
@Order(1) <2> @Order(1) <2>
public SecurityFilterChain apiFilterChain(HttpSecurity http) throws Exception { public SecurityFilterChain apiFilterChain(HttpSecurity http) throws Exception {
http http
.antMatcher("/api/**") <3> .securityMatcher("/api/**") <3>
.authorizeHttpRequests(authorize -> authorize .authorizeHttpRequests(authorize -> authorize
.anyRequest().hasRole("ADMIN") .anyRequest().hasRole("ADMIN")
) )
@ -230,7 +230,7 @@ public class MultiHttpSecurityConfig {
---- ----
<1> Configure Authentication as usual. <1> Configure Authentication as usual.
<2> Create an instance of `SecurityFilterChain` that contains `@Order` to specify which `SecurityFilterChain` should be considered first. <2> Create an instance of `SecurityFilterChain` that contains `@Order` to specify which `SecurityFilterChain` should be considered first.
<3> The `http.antMatcher` states that this `HttpSecurity` is applicable only to URLs that start with `/api/`. <3> The `http.securityMatcher` states that this `HttpSecurity` is applicable only to URLs that start with `/api/`.
<4> Create another instance of `SecurityFilterChain`. <4> Create another instance of `SecurityFilterChain`.
If the URL does not start with `/api/`, this configuration is used. If the URL does not start with `/api/`, this configuration is used.
This configuration is considered after `apiFilterChain`, since it has an `@Order` value after `1` (no `@Order` defaults to last). This configuration is considered after `apiFilterChain`, since it has an `@Order` value after `1` (no `@Order` defaults to last).