iSharkFly-Docs
/
java-tutorials
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

BAEL-445: Update to the simple Spring Security hasRole example (#940) 

* Add NDC and JBoss Logging to the demo application

* NDC for Log4j, Log4j2 and JBoss Logging

* Simplify NDC example by making it a single operation instead of two

* Make NDC example as RestController, Use JBoss Logging only as a logging bridge

* Fix merge conflicts in pull request - log-mdc pom.xml updated

* BAEL-445 Update to Spring security SpEL example

* BAEL-445: Change tabs to spaces in the updated code
This commit is contained in:
Sunil Mogadati 2016-12-29 15:55:40 -07:00 committed by Eugen
parent 07cfaecbd9
commit 08896d72bc
6 changed files with 26 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
spring-security-mvc-login/pom.xml
View File

@ -222,8 +222,8 @@
<properties> <properties>
<!-- Spring --> <!-- Spring -->
<org.springframework.version>4.3.4.RELEASE</org.springframework.version> <org.springframework.version>4.3.5.RELEASE</org.springframework.version>
<org.springframework.security.version>4.2.0.RELEASE</org.springframework.security.version> <org.springframework.security.version>4.2.1.RELEASE</org.springframework.security.version>
<!-- persistence --> <!-- persistence -->
<hibernate.version>5.2.5.Final</hibernate.version> <hibernate.version>5.2.5.Final</hibernate.version>

1
spring-security-mvc-login/src/main/java/org/baeldung/spring/MvcConfig.java
View File

@ -27,6 +27,7 @@ public class MvcConfig extends WebMvcConfigurerAdapter {
registry.addViewController("/login.html"); registry.addViewController("/login.html");
registry.addViewController("/homepage.html"); registry.addViewController("/homepage.html");
registry.addViewController("/admin/adminpage.html");
} }
@Bean @Bean

5
spring-security-mvc-login/src/main/java/org/baeldung/spring/SecSecurityConfig.java
View File

@ -26,7 +26,9 @@ public class SecSecurityConfig extends WebSecurityConfigurerAdapter {
auth.inMemoryAuthentication() auth.inMemoryAuthentication()
.withUser("user1").password("user1Pass").roles("USER") .withUser("user1").password("user1Pass").roles("USER")
.and() .and()
.withUser("user2").password("user2Pass").roles("USER"); .withUser("user2").password("user2Pass").roles("USER")
.and()
.withUser("admin").password("adminPass").roles("ADMIN");
// @formatter:on // @formatter:on
} }
@ -36,6 +38,7 @@ public class SecSecurityConfig extends WebSecurityConfigurerAdapter {
http http
.csrf().disable() .csrf().disable()
.authorizeRequests() .authorizeRequests()
.antMatchers("/admin/**").hasRole("ADMIN")
.antMatchers("/anonymous*").anonymous() .antMatchers("/anonymous*").anonymous()
.antMatchers("/login*").permitAll() .antMatchers("/login*").permitAll()
.anyRequest().authenticated() .anyRequest().authenticated()

2
spring-security-mvc-login/src/main/resources/webSecurityConfig.xml
View File

@ -8,6 +8,7 @@
> >
<http use-expressions="true"> <http use-expressions="true">
<intercept-url pattern="/admin/**" access="hasRole('ROLE_ADMIN')"/>
<intercept-url pattern="/anonymous*" access="isAnonymous()"/> <intercept-url pattern="/anonymous*" access="isAnonymous()"/>
<intercept-url pattern="/login*" access="permitAll"/> <intercept-url pattern="/login*" access="permitAll"/>
<intercept-url pattern="/**" access="isAuthenticated()"/> <intercept-url pattern="/**" access="isAuthenticated()"/>
@ -27,6 +28,7 @@
<user-service> <user-service>
<user name="user1" password="user1Pass" authorities="ROLE_USER"/> <user name="user1" password="user1Pass" authorities="ROLE_USER"/>
<user name="user2" password="user2Pass" authorities="ROLE_USER"/> <user name="user2" password="user2Pass" authorities="ROLE_USER"/>
<user name="admin" password="adminPass" authorities="ROLE_ADMIN"/>
</user-service> </user-service>
</authentication-provider> </authentication-provider>
</authentication-manager> </authentication-manager>

15
spring-security-mvc-login/src/main/webapp/WEB-INF/view/admin/adminpage.jsp Normal file
View File

@ -0,0 +1,15 @@
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<%@ taglib prefix="security" uri="http://www.springframework.org/security/tags" %>
<html>
<head></head>
<body>
<h1>This is the body of the sample admin page</h1>
This page is only visible to an admin
<br/>
<a href="<c:url value="/perform_logout" />">Logout</a>
</body>
</html>

2
spring-security-mvc-login/src/main/webapp/WEB-INF/view/homepage.jsp
View File

@ -14,6 +14,8 @@
<security:authorize access="hasRole('ROLE_ADMIN')"> <security:authorize access="hasRole('ROLE_ADMIN')">
This text is only visible to an admin This text is only visible to an admin
<br/> <br/>
<a href="<c:url value="/admin/adminpage.html" />">Admin Page</a>
<br/>
</security:authorize> </security:authorize>
<a href="<c:url value="/perform_logout" />">Logout</a> <a href="<c:url value="/perform_logout" />">Logout</a>