Comments (5)
It is expected that the SecurityAutoConfiguration
would provide some defaults that you might otherwise have to provide in your own configuration. You can always disable the SecurityAutoConfiguration
(by excluding it in @EnableAutoConfiguration
), but I'd rather hear the details and try and see how to change things if necessary. You might need to describe your use case in a bit more detail to see if we need to explicitly support it or not.
from spring-boot.
essentially, i followed the securing-web guide and got a security config like this (groovy):
@Configuration
@EnableWebSecurity
class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/login").permitAll()
.antMatchers("/dummy").permitAll()
.antMatchers("/secured").hasRole("USER")
.anyRequest().authenticated()
http.formLogin()
.defaultSuccessUrl("/secured")
.loginPage("/login")
http.logout().permitAll()
}
}
now if i add the dependency for spring-boot-starter-actuator in my gradle build, the app is asking for basic auth under any url...
thanks, zyro
from spring-boot.
Right, that's because your configurator callback is unordered, while the SecurityAutoConfiguration
contains one that has @Order(Ordered.LOWEST_PRECEDENCE - 5)
. I suggest maybe you add @Order(Ordered.LOWEST_PRECEDENCE - 10)
to yours.
from spring-boot.
oh well... i spotted the option for ordering but thought "last wins" with the highest precedence being last :/
i will give @Order(Ordered.LOWEST_PRECEDENCE - 10)
a spin in a few hours and comment here if i succeeded - then this could be closed of course.
thanks for the quick help!
from spring-boot.
works. thanks again. closed.
from spring-boot.
Related Issues (20)
- Upgrade to Spring GraphQL 1.3.2
- Upgrade to Commons Codec 1.17.1
- Upgrade to Spring GraphQL 1.3.2
- Feature request: AutoConfiguration-Factories HOT 1
- Upgrade to Spring Pulsar 1.0.8
- Prohibit upgrades to Undertow 2.3.15
- Prohibit upgrades to Undertow 2.3.15
- Prohibit upgrades to Undertow 2.3.15
- Upgrade to Spring Pulsar 1.1.2
- Upgrade to Spring Pulsar 1.1.2
- Upgrade to H2 2.3.230
- little suggestion about ssl util PemContent
- Proposal for Content Revision on Wiki - "Spring Boot 3.0 Migration Guide" HOT 1
- Some @ControllerEndpoint and @RestControllerEndpoint infrastructure remains undeprecated
- Allow ContainerConnectionDetailsFactory to match on one of multiple different connection names
- Spring Authorization Server now defaults multipleIssuersAllowed to false and it cannot be easily re-enabled
- Exceeding 32 @SpringBootTest Configurations Causes Netty RejectedExecutionException with WebFlux HOT 3
- Fix documentation links in the README
- Fix documentation links in the README
- Add support for CNB platform API version 0.14
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-boot.