treshenkov/clearing
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

.

Browse source
This commit is contained in:
ialbert 2022-07-28 18:49:30 +03:00
parent 612c79b53f
commit 059f6cc980
2 changed files with 18 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
clearing-parent/backend-api/src/main/java/ru/spcex/clearing/backendapi/security/WebSecurityConfig.java
View file

@ -41,6 +41,8 @@ public class WebSecurityConfig extends KeycloakWebSecurityConfigurerAdapter {
http http
.authorizeRequests() .authorizeRequests()
.antMatchers("/anonymous/**").permitAll() .antMatchers("/anonymous/**").permitAll()
.anyRequest().fullyAuthenticated(); .antMatchers("/sso/login").permitAll()
.antMatchers("/error").permitAll()
.anyRequest().hasAnyRole("admin");
} }
} }

19
clearing-parent/backend-api/src/main/resources/application.properties
View file

@ -4,10 +4,21 @@ spring.main.web-application-type=servlet
logging.level.root=warn logging.level.root=warn
#keycloak #keycloak
keycloak.auth-server-url=http://10.200.200.147:8080/auth keycloak.auth-server-url=http://10.200.200.147:8080/
keycloak.realm=Master keycloak.realm=master
keycloak.resource=clearing keycloak.resource=clearing
keycloak.public-client=true keycloak.public-client=true
#keycloak.credentials.secret=WnOVCxcAmrUYc8IjiFHOuRif5Oesoyfr #keycloak.credentials.secret=WnOVCxcAmrUYc8IjiFHOuRif5Oesoyfr
keycloak.security-constraints[0].authRoles[0]=admin #keycloak.security-constraints[0].authRoles[0]=admin
keycloak.security-constraints[0].securityCollections[0].patterns[0]=/backend-api/users/* #keycloak.security-constraints[0].securityCollections[0].patterns[0]=/backend-api/users/*
#keycloak.policy-enforcer-config.paths[0].path=/*
#keycloak.policy-enforcer-config.paths[0].enforcementMode=ENFORCING
#keycloak.policy-enforcer-config.paths[1].path=/backend-api/anonymous/method1
#keycloak.policy-enforcer-config.paths[1].enforcementMode=DISABLED
#keycloak.security-constraints[1].auth-roles[0]=*
#keycloak.security-constraints[1].security-collections[0].patterns[0]=/backend-api/anonymous/method1
#keycloak.security-constraints[1].securityCollections[0].name=anonymous-methods
#keycloak.security-constraints[1].securityCollections[0].patterns[0]=/backend-api/anonymous/method1