Backup_Repos/komga
1
0
Fork 0
mirror of https://github.com/gotson/komga.git synced 2026-01-04 06:44:06 +01:00
Code Issues Projects Releases Wiki Activity

better formatting in SecurityConfiguration.kt

Browse source
This commit is contained in:
Gauthier Roebroeck 2019-11-19 14:26:16 +08:00
parent 87d6c1f992
commit b5533a5aeb
1 changed files with 27 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

46
komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt
View file

@ -27,35 +27,43 @@ class SecurityConfiguration(
) : WebSecurityConfigurerAdapter() {
override fun configure(http: HttpSecurity) {
// @formatter:off
http
.addFilterAt(LoggingBasicAuthFilter(this.authenticationManager()), BasicAuthenticationFilter::class.java)
.cors().and()
.csrf().disable()
.cors()
.and()
.csrf().disable()
.authorizeRequests()
// unrestricted endpoints
.requestMatchers(PathRequest.toStaticResources().atCommonLocations()).permitAll()
// unrestricted endpoints
.requestMatchers(PathRequest.toStaticResources().atCommonLocations()).permitAll()
// restrict all actuator endpoints to ADMIN only
.requestMatchers(EndpointRequest.toAnyEndpoint()).hasRole("ADMIN")
// restrict all actuator endpoints to ADMIN only
.requestMatchers(EndpointRequest.toAnyEndpoint()).hasRole("ADMIN")
// restrict H2 console to ADMIN only
.requestMatchers(PathRequest.toH2Console()).hasRole("ADMIN")
// restrict H2 console to ADMIN only
.requestMatchers(PathRequest.toH2Console()).hasRole("ADMIN")
// all other endpoints are restricted to authenticated users
.antMatchers(
"/api/**",
"/opds/**"
).hasRole("USER")
// all other endpoints are restricted to authenticated users
.antMatchers(
"/api/**",
"/opds/**"
).hasRole("USER")
// authorize frames for H2 console
.and().headers().frameOptions().sameOrigin()
.and()
.headers().frameOptions().sameOrigin()
.and().httpBasic()
.and()
.httpBasic()
.and().sessionManagement()
.maximumSessions(10)
.sessionRegistry(sessionRegistry())
.and()
.sessionManagement()
.maximumSessions(10)
.sessionRegistry(sessionRegistry())
// @formatter:on
}
override fun configure(web: WebSecurity) {