From 15ae72d896665d69f6b621dba4ef03166e472440 Mon Sep 17 00:00:00 2001 From: nasirov <47319902+nasirov@users.noreply.github.com> Date: Wed, 16 Oct 2024 15:42:50 +0300 Subject: [PATCH] replace deprecations --- .../configuration/AnibozuSecurityConfiguration.java | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/src/main/java/nasirov/yv/anibozu/configuration/AnibozuSecurityConfiguration.java b/src/main/java/nasirov/yv/anibozu/configuration/AnibozuSecurityConfiguration.java index c934669..b6a3b36 100644 --- a/src/main/java/nasirov/yv/anibozu/configuration/AnibozuSecurityConfiguration.java +++ b/src/main/java/nasirov/yv/anibozu/configuration/AnibozuSecurityConfiguration.java @@ -7,6 +7,7 @@ import org.springframework.security.config.Customizer; import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity; import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.config.web.server.ServerHttpSecurity.CsrfSpec; import org.springframework.security.core.userdetails.MapReactiveUserDetailsService; import org.springframework.security.core.userdetails.User; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; @@ -38,15 +39,10 @@ public MapReactiveUserDetailsService userDetailsService(AppProps appProps, Passw @Bean public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) { - return http.csrf() - .disable() + return http.csrf(CsrfSpec::disable) .httpBasic(Customizer.withDefaults()) - .authorizeExchange() - .pathMatchers("/actuator/**", "/api/v1/user/**") - .permitAll() - .pathMatchers("/api/v1/anime/**") - .hasRole("ADMIN") - .and() + .authorizeExchange( + exchanges -> exchanges.pathMatchers("/actuator/**", "/api/v1/user/**").permitAll().pathMatchers("/api/v1/anime/**").hasRole("ADMIN")) .build(); } }