org.springframework.security.web.authentication.HttpStatusEntryPoint Java Examples

@Override
protected void configure(HttpSecurity http) throws Exception {
	// consider moving to stateless and handle token on Angular side
	if (properties.isSecurityEnabled()) {
		// @formatter:off
		http
			.antMatcher("/**").authorizeRequests()
				.antMatchers("/", "/favicon.ico",
						"/assets/**",
						"/login**", "/styles**", "/inline**", "/polyfills**",
						"/scripts***", "/main**" ).permitAll()
				.anyRequest().authenticated()

			.and().logout().logoutSuccessUrl("/").permitAll()
			.and().csrf().csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
			.and().exceptionHandling().authenticationEntryPoint(new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED))
			// .and().sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
			.and().addFilterBefore(ssoFilter(), BasicAuthenticationFilter.class);
		// @formatter:on
	}
	else {
		http.authorizeRequests().antMatchers("/**").permitAll();
		http.csrf().disable();
	}
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {

	// We add basic auth for /preemptive so server returns 403 as
	// exception handling is changed to force 403.
	// normal maven behaviour is that it needs 401 to continue with a challenge.
	// This is where preemptive auth takes place as client should send auth
	// with every request.

	http
		.antMatcher("/preemptive/**")
		.authorizeRequests(authorizeRequests ->
                  authorizeRequests.anyRequest().hasRole("USER")
		)
		.httpBasic()
			.and()
		.exceptionHandling()
			.authenticationEntryPoint(new HttpStatusEntryPoint(HttpStatus.FORBIDDEN));
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {

    http.antMatcher(API_BASE_URL)
            // すべてのリクエストに認証をかける
            .authorizeRequests().anyRequest().authenticated()
            // Basic認証をかける
            .and().httpBasic().authenticationEntryPoint(new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED))
            // CSRFチェックをしない
            .and().csrf().disable();
}
 

@Override
protected void configure(HttpSecurity http) throws Exception {
	// @formatter:off
	http
	  //.headers()
	    //.frameOptions().sameOrigin()
	  //  .and()
	  .authorizeRequests()
	    .antMatchers("/index.html", "/csrf", "/", "/router").permitAll()
	    .antMatchers("/info", "/health").permitAll()
	    .anyRequest().authenticated()
	    .and()
	  .rememberMe()
           .rememberMeServices(this.rememberMeServices)
           .key(this.appProperties.getRemembermeCookieKey())
	    .and()
	  .formLogin()
           .successHandler(this.authenticationSuccessHandler)
           .failureHandler(new JsonAuthFailureHandler())
	    .permitAll()
	    .and()
	  .logout()
           .logoutSuccessHandler(new HttpStatusReturningLogoutSuccessHandler())
           .deleteCookies("JSESSIONID")
	    .permitAll()
	    .and()
	  .exceptionHandling()
           .authenticationEntryPoint(new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED));
	// @formatter:on
}
 

@Bean
AuthenticationEntryPoint forbiddenEntryPoint() {
  return new HttpStatusEntryPoint(FORBIDDEN);
}
 

@Override
public void configure(HttpSecurity http) throws Exception {
	http.antMatcher("/ui/**").authorizeRequests().antMatchers("/ui/test").permitAll().anyRequest()
			.authenticated().and().exceptionHandling()
			.authenticationEntryPoint(new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED));
}
 

@Bean
public AuthenticationEntryPoint restAuthEntryPoint() {
  return new HttpStatusEntryPoint(HttpStatus.UNAUTHORIZED);
}