florian/hexagonal-architecture-starter
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add basic auth spring security configuration.

Browse Source
This commit is contained in:
Florian THIERRY
2023-11-28 15:17:46 +01:00
parent 025197525c
commit 914785a29b
11 changed files with 191 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pom.xml
View File

@@ -15,6 +15,7 @@
<java.version>21</java.version>
<maven.compiler.source>21</maven.compiler.source>
<maven.compiler.target>21</maven.compiler.target>
<jakarta.servlet-api.version>6.0.0</jakarta.servlet-api.version>
</properties>
<modules>
@@ -54,6 +55,11 @@
<artifactId>sportshub-infrastructure</artifactId>
<version>${project.version}</version>
</dependency>
<dependency>
<groupId>jakarta.servlet</groupId>
<artifactId>jakarta.servlet-api</artifactId>
<version>${jakarta.servlet-api.version}</version>
</dependency>
</dependencies>
</dependencyManagement>

8
sportshub-application/pom.xml
View File

@@ -25,5 +25,13 @@
<groupId>org.springframework</groupId>
<artifactId>spring-context</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>jakarta.servlet</groupId>
<artifactId>jakarta.servlet-api</artifactId>
</dependency>
</dependencies>
</project>

57
sportshub-application/src/main/java/org/sportshub/application/configuration/SecurityConfiguration.java Normal file
View File

@@ -0,0 +1,57 @@
package org.sportshub.application.configuration;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
import jakarta.servlet.DispatcherType;
import jakarta.servlet.http.HttpServletResponse;
@Configuration
@EnableWebSecurity
public class SecurityConfiguration {
@Bean
public SecurityFilterChain securityFilterChain(
HttpSecurity httpSecurity
) throws Exception {
httpSecurity
.csrf(AbstractHttpConfigurer::disable)
.httpBasic(Customizer.withDefaults())
.authorizeHttpRequests(requests -> requests
.dispatcherTypeMatchers(DispatcherType.FORWARD).permitAll()
.requestMatchers(
HttpMethod.GET,
"/api/health/check"
).permitAll()
.requestMatchers(
HttpMethod.POST,
"/api/users/login"
).permitAll()
.anyRequest().authenticated()
)
.exceptionHandling(configurer -> configurer
.defaultAuthenticationEntryPointFor(
(request, response, authException) -> response.sendError(HttpServletResponse.SC_UNAUTHORIZED),
new AntPathRequestMatcher("/api/**")
).defaultAccessDeniedHandlerFor(
(request, response, accessDeniedException) -> response.sendError(HttpServletResponse.SC_FORBIDDEN),
new AntPathRequestMatcher("/api/**")
)
);
return httpSecurity.build();
}
@Bean
public PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
}

51
sportshub-application/src/main/java/org/sportshub/application/user/CustomUserDetails.java Normal file
View File

@@ -0,0 +1,51 @@
package org.sportshub.application.user;
import static java.util.Collections.emptyList;
import java.util.Collection;
import org.sportshub.domain.user.model.User;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;
public class CustomUserDetails implements UserDetails {
private final User user;
public CustomUserDetails(final User user) {
this.user = user;
}
@Override
public Collection<? extends GrantedAuthority> getAuthorities() {
return emptyList();
}
@Override
public String getUsername() {
return user.id().toString();
}
@Override
public String getPassword() {
return user.password();
}
@Override
public boolean isAccountNonExpired() {
return true;
}
@Override
public boolean isAccountNonLocked() {
return true;
}
@Override
public boolean isCredentialsNonExpired() {
return true;
}
@Override
public boolean isEnabled() {
return true;
}
}

33
sportshub-application/src/main/java/org/sportshub/application/user/CustomUserDetailsService.java Normal file
View File

@@ -0,0 +1,33 @@
package org.sportshub.application.user;
import java.util.UUID;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
@Service
public class CustomUserDetailsService implements UserDetailsService {
private final UserUseCases userUseCases;
public CustomUserDetailsService(final UserUseCases userUseCases) {
this.userUseCases = userUseCases;
}
@Override
public UserDetails loadUserByUsername(final String userIdAsString) throws UsernameNotFoundException {
UUID userId = parseUserId(userIdAsString);
return userUseCases.findById(userId)
.map(CustomUserDetails::new)
.orElseThrow(() -> new UsernameNotFoundException(userIdAsString));
}
private UUID parseUserId(final String userIdAsString) {
try {
return UUID.fromString(userIdAsString);
} catch (IllegalArgumentException exception) {
throw new UsernameNotFoundException(userIdAsString);
}
}
}

5
sportshub-application/src/main/java/org/sportshub/application/user/UserUseCases.java
View File

@@ -1,5 +1,6 @@
package org.sportshub.application.user;
import java.util.List;
import java.util.Optional;
import java.util.UUID;
@@ -18,4 +19,8 @@ public class UserUseCases {
public Optional<User> findById(UUID userId) {
return userPort.findById(userId);
}
public List<User> findAll() {
return userPort.findAll();
}
}

3
sportshub-domain/src/main/java/org/sportshub/domain/user/port/UserPort.java
View File

@@ -1,5 +1,6 @@
package org.sportshub.domain.user.port;
import java.util.List;
import java.util.Optional;
import java.util.UUID;
@@ -7,4 +8,6 @@ import org.sportshub.domain.user.model.User;
public interface UserPort {
Optional<User> findById(UUID userId);
List<User> findAll();
}

13
sportshub-exposition/pom.xml
View File

@@ -17,6 +17,14 @@
<packaging>jar</packaging>
<dependencies>
<dependency>
<groupId>org.sportshub</groupId>
<artifactId>sportshub-application</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<!-- <dependency>-->
<!-- <groupId>org.springframework.boot</groupId>-->
<!-- <artifactId>spring-boot-starter-data-jpa</artifactId>-->
@@ -25,11 +33,6 @@
<!-- <groupId>org.springframework.boot</groupId>-->
<!-- <artifactId>spring-boot-starter-security</artifactId>-->
<!-- </dependency>-->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<!-- <dependency>-->
<!-- <groupId>org.postgresql</groupId>-->
<!-- <artifactId>postgresql</artifactId>-->

11
sportshub-exposition/src/main/java/org/sportshub/exposition/user/UserController.java
View File

@@ -1,8 +1,10 @@
package org.sportshub.exposition.user;
import java.util.UUID;
import java.util.List;
import org.sportshub.application.user.UserUseCases;
import org.sportshub.domain.user.model.User;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
@@ -16,8 +18,13 @@ public class UserController {
this.userUseCases = userUseCases;
}
@PostMapping
@PostMapping("/login")
public String login() {
return "";
}
@GetMapping
public List<User> findAll() {
return userUseCases.findAll();
}
}

11
sportshub-infrastructure/src/main/java/org/sportshub/infrastructure/user/adapter/UserInMemoryAdapter.java
View File

@@ -11,9 +11,9 @@ import org.springframework.stereotype.Component;
@Component
public class UserInMemoryAdapter implements UserPort {
private static final List<User> users = List.of(
new User(UUID.fromString("c1a0805f-c618-47dc-bae7-bee70503644e"), "password"),
new User(UUID.fromString("4eff194d-dd8e-463e-974f-034bfd509f84"), "password"),
new User(UUID.fromString("c78d7d7c-0386-415d-86dc-98a470591e07"), "password")
new User(UUID.fromString("c1a0805f-c618-47dc-bae7-bee70503644e"), "$2a$10$WPuLOKpvaQnMotNo5ijPwegBPwmMF1C04XkTNCBpeBFo4r2YJWy.2"),
new User(UUID.fromString("4eff194d-dd8e-463e-974f-034bfd509f84"), "$2a$10$WPuLOKpvaQnMotNo5ijPwegBPwmMF1C04XkTNCBpeBFo4r2YJWy.2"),
new User(UUID.fromString("c78d7d7c-0386-415d-86dc-98a470591e07"), "$2a$10$WPuLOKpvaQnMotNo5ijPwegBPwmMF1C04XkTNCBpeBFo4r2YJWy.2")
);
@Override
@@ -22,4 +22,9 @@ public class UserInMemoryAdapter implements UserPort {
.filter(user -> userId.equals(user.id()))
.findFirst();
}
@Override
public List<User> findAll() {
return users;
}
}

3
sportshub-launcher/src/main/resources/application.yml Normal file
View File

@@ -0,0 +1,3 @@
logging:
level:
org.springframework.security: DEBUG