Spring Security Configuration in Spring Download

Question

I am working on converting a Spring 3 project to Spring 4 + Spring Boot. I do not know whether to do it right or not. I am converting Spring Security XML XML configuration to Java based configuration as follows:

@Configuration @EnableWebSecurity public class WebSecurityConfig extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws Exception { http.authorizeRequests().antMatchers("/", "/home").permitAll() .anyRequest().authenticated(); http.formLogin() .defaultSuccessUrl("/afterLogin") .loginPage("/profiles/lognin/form") .failureUrl("/accessDenied") .and() .authorizeRequests() .regexMatchers("....") .hasRole("ROLE_USER") .antMatchers("....") .hasRole("ROLE_USER") //.... ; } @Override protected void configure(AuthenticationManagerBuilder authManagerBuilder) throws Exception { authManagerBuilder.authenticationProvider(this.getDaoAuthenticationProvider()); } // .... } 

I get the default Spring login window popup when I delete the home URL. It seems to me that the above configuration does not take effect, but by default Spring Security Configuration in Spring Boot does not work. If so, how to override the default value?

Answer 1

I find the answer. I need to create a file called application.properties with the following line:

 security.basic.enabled=false 

and put this file in src / main / resource. That's all.

Answer 2

Customize your spring this way.

 protected void configure(HttpSecurity http) throws Exception { http .csrf() .and() .addFilterAfter(csrfHeaderFilter(), CsrfFilter.class) .exceptionHandling() .and() .rememberMe() .and() .formLogin() .loginProcessingUrl("/user") // rest apiyi yaz. //.usernameParameter("username") //.passwordParameter("password") .permitAll() .and() .logout() //.logoutUrl("/api/logout") //.deleteCookies("JSESSIONID", "CSRF-TOKEN") .permitAll() .and() .headers() .frameOptions() .disable() .authorizeRequests() .antMatchers("/login").permitAll() .antMatchers("/#/dashboard/home").permitAll() ; }