CODEWITHSUNDEEP
javaspringspring-securityspring-security-oauth2
alexanoid
alexanoid

Reputation: 25770

Spring Security configuration based on different http methods

In my Spring Boot application I have configured following OAuth2 ResourceServer:

@Override
public void configure(HttpSecurity http) throws Exception {
    // @formatter:off
    http
            .antMatcher("/api/**").authorizeRequests()
            .antMatchers("/api/v1.0/users").permitAll()
            .anyRequest().authenticated()
            .and()
            .csrf().disable()
            .sessionManagement().sessionCreationPolicy(STATELESS); 
    // @formatter:on
}

In my REST API UserController I have two different request handler methods - for POST and for GET http methods. Right now both of them in the configuration above are public.

I'd like to secure POST method and make a GET as public even for anonymous users

How the configuration above can be changed in order to support this ?

Upvotes: 0

Views: 75

Answers (1)

JEY
JEY

Reputation: 7123

Just add the method in the matcher

antMatchers(HttpMethod.POST, "/api/v1.0/users")

Upvotes: 1

Related Questions