From 059f6cc980f8ba37864cae998667e58be2eb9979 Mon Sep 17 00:00:00 2001 From: ialbert Date: Thu, 28 Jul 2022 18:49:30 +0300 Subject: [PATCH] . --- .../security/WebSecurityConfig.java | 4 +++- .../src/main/resources/application.properties | 19 +++++++++++++++---- 2 files changed, 18 insertions(+), 5 deletions(-) diff --git a/clearing-parent/backend-api/src/main/java/ru/spcex/clearing/backendapi/security/WebSecurityConfig.java b/clearing-parent/backend-api/src/main/java/ru/spcex/clearing/backendapi/security/WebSecurityConfig.java index 318f88e0d..f393459e4 100644 --- a/clearing-parent/backend-api/src/main/java/ru/spcex/clearing/backendapi/security/WebSecurityConfig.java +++ b/clearing-parent/backend-api/src/main/java/ru/spcex/clearing/backendapi/security/WebSecurityConfig.java @@ -41,6 +41,8 @@ public class WebSecurityConfig extends KeycloakWebSecurityConfigurerAdapter { http .authorizeRequests() .antMatchers("/anonymous/**").permitAll() - .anyRequest().fullyAuthenticated(); + .antMatchers("/sso/login").permitAll() + .antMatchers("/error").permitAll() + .anyRequest().hasAnyRole("admin"); } } diff --git a/clearing-parent/backend-api/src/main/resources/application.properties b/clearing-parent/backend-api/src/main/resources/application.properties index 4399d094d..549ccb8db 100644 --- a/clearing-parent/backend-api/src/main/resources/application.properties +++ b/clearing-parent/backend-api/src/main/resources/application.properties @@ -4,10 +4,21 @@ spring.main.web-application-type=servlet logging.level.root=warn #keycloak -keycloak.auth-server-url=http://10.200.200.147:8080/auth -keycloak.realm=Master +keycloak.auth-server-url=http://10.200.200.147:8080/ +keycloak.realm=master keycloak.resource=clearing keycloak.public-client=true #keycloak.credentials.secret=WnOVCxcAmrUYc8IjiFHOuRif5Oesoyfr -keycloak.security-constraints[0].authRoles[0]=admin -keycloak.security-constraints[0].securityCollections[0].patterns[0]=/backend-api/users/* \ No newline at end of file +#keycloak.security-constraints[0].authRoles[0]=admin +#keycloak.security-constraints[0].securityCollections[0].patterns[0]=/backend-api/users/* + + +#keycloak.policy-enforcer-config.paths[0].path=/* +#keycloak.policy-enforcer-config.paths[0].enforcementMode=ENFORCING +#keycloak.policy-enforcer-config.paths[1].path=/backend-api/anonymous/method1 +#keycloak.policy-enforcer-config.paths[1].enforcementMode=DISABLED +#keycloak.security-constraints[1].auth-roles[0]=* +#keycloak.security-constraints[1].security-collections[0].patterns[0]=/backend-api/anonymous/method1 + +#keycloak.security-constraints[1].securityCollections[0].name=anonymous-methods +#keycloak.security-constraints[1].securityCollections[0].patterns[0]=/backend-api/anonymous/method1