Comments (5)
It is expected that the SecurityAutoConfiguration
would provide some defaults that you might otherwise have to provide in your own configuration. You can always disable the SecurityAutoConfiguration
(by excluding it in @EnableAutoConfiguration
), but I'd rather hear the details and try and see how to change things if necessary. You might need to describe your use case in a bit more detail to see if we need to explicitly support it or not.
from spring-boot.
essentially, i followed the securing-web guide and got a security config like this (groovy):
@Configuration
@EnableWebSecurity
class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/login").permitAll()
.antMatchers("/dummy").permitAll()
.antMatchers("/secured").hasRole("USER")
.anyRequest().authenticated()
http.formLogin()
.defaultSuccessUrl("/secured")
.loginPage("/login")
http.logout().permitAll()
}
}
now if i add the dependency for spring-boot-starter-actuator in my gradle build, the app is asking for basic auth under any url...
thanks, zyro
from spring-boot.
Right, that's because your configurator callback is unordered, while the SecurityAutoConfiguration
contains one that has @Order(Ordered.LOWEST_PRECEDENCE - 5)
. I suggest maybe you add @Order(Ordered.LOWEST_PRECEDENCE - 10)
to yours.
from spring-boot.
oh well... i spotted the option for ordering but thought "last wins" with the highest precedence being last :/
i will give @Order(Ordered.LOWEST_PRECEDENCE - 10)
a spin in a few hours and comment here if i succeeded - then this could be closed of course.
thanks for the quick help!
from spring-boot.
works. thanks again. closed.
from spring-boot.
Related Issues (20)
- Circular placeholder reference when running mvn clean -Pnative native:compile HOT 1
- Memory increases with 3.2.3 HOT 13
- Add public getUndertow method to UndertowWebServer HOT 6
- Configuration properties cannot be bound to DruidDataSource when the environment contains a non-enumerable property source HOT 4
- Incorrect Handling of Active Profiles in Docker Compose Integration HOT 5
- Incorrect classloader used by commom ForkJoinPool when using Executable Jar HOT 2
- Upgrade Ubuntu version in CI images
- Upgrade Ubuntu version in CI images
- Upgrade Ubuntu version in CI images
- Spring Boot 3.2 automatically change log level during shutdown HOT 1
- Create a RestClient alternative to WebTestClient and TestRestTemplate HOT 1
- @Autowired Field Injection HOT 1
- Command pattern in spring HOT 1
- Publish snapshots using GitHub Actions
- mainClass property of bootJar and bootWar cannot be read unless resolveMainClassName has already executed HOT 1
- spring.mvc.converters.preferred-json-mapper is effectively ignored when certain serde frameworks are detected in the classpath, notably kotlinx.serialization HOT 5
- Disable logback packagingData HOT 5
- springboo-rsocket how to use contextView HOT 3
- Unexpected behaviour with new spring boot loader implementation HOT 1
- server.error.include-binding-errors does not recognize MethodValidationResult exceptions
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from spring-boot.