SecurityFilterChain

Spring Security는 로그인이나 접속 통제를

filter를 통해 처리하고
이러한 필터의 설정을 하는 Bean이 SecurityFilterChain이다

 

 

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    @Bean
    SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http.authorizeHttpRequests((authorizeHttpRequests) -> authorizeHttpRequests
            .requestMatchers(new AntPathRequestMatcher("/user/data")).authenticated()
            .anyRequest().permitAll());
                
        http.httpBasic((http_basic)-> http_basic.disable());
      
        http.formLogin((form_login) -> form_login
            .loginPage("/user/login/session")
            .usernameParameter("name")
            .passwordParameter("password")
            .loginProcessingUrl("/user/login/session")
            .defaultSuccessUrl("/"));

        http.csrf((csrf) -> csrf
            .ignoringRequestMatchers(new AntPathRequestMatcher("/**")));
 
        return http.build();
    }