EduLascala 1 mēnesi atpakaļ
vecāks
revīzija
41bf8b5c82

+ 0 - 23
src/main/java/com/platform2easy/genesis/infra/security/SecurityConfig.java

@@ -22,27 +22,4 @@ public class SecurityConfig {
         this.securityFilter = securityFilter;
     }
 
-    @Bean
-    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
-        http
-            .csrf(csrf -> csrf.disable())
-            .headers(headers -> headers.frameOptions(frame -> frame.disable()))
-            .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
-            .authorizeHttpRequests(auth -> auth
-                .requestMatchers("/auth/**", "/h2-console/**", "/banco/**", "/api/company/register-with-user").permitAll()
-                .anyRequest().authenticated()
-            )
-            .addFilterBefore(securityFilter, UsernamePasswordAuthenticationFilter.class);
-        return http.build();
-    }
-
-    @Bean
-    public PasswordEncoder passwordEncoder() {
-        return new BCryptPasswordEncoder();
-    }
-
-    @Bean
-    public AuthenticationManager authenticationManager(AuthenticationConfiguration configuration) throws Exception {
-        return configuration.getAuthenticationManager();
-    }
 }

+ 3 - 1
src/main/java/com/platform2easy/genesis/security/config/SecurityConfiguration.java

@@ -16,6 +16,8 @@ import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.security.web.SecurityFilterChain;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 
 @Configuration
 @EnableWebSecurity
@@ -38,7 +40,7 @@ class SecurityConfiguration {
                 .httpBasic(Customizer.withDefaults())
                 .headers(headers -> headers.frameOptions(frameOptionsConfig -> frameOptionsConfig.sameOrigin()))//liberar o banco
                 .authorizeHttpRequests(auth -> auth
-                        .requestMatchers("/login", "/images/**", "/css/**", "/error/**", "/").permitAll()
+                        .requestMatchers("/login", "/images/**", "/css/**", "/error/**", "/", "/api/company/register-with-user").permitAll()
                         .requestMatchers(HttpMethod.POST, "/authentication/login").permitAll()
                         .requestMatchers("/auth/**").permitAll()
                         .requestMatchers("/api/**").authenticated()