Spring Security Cheatsheet

cheatsheet_spring_security.md

Spring Security Cheatsheet

HttpSecurity

	@Override
	protected void configure(HttpSecurity http) throws Exception {
	    http
	        .authorizeRequests()
	            .antMatchers("/", "/images/**", "/styles.css", "/webjars/**").permitAll()
	            .antMatchers("/books", "/books/search").hasAnyRole("ADMIN", "CUSTOMER")
	            .anyRequest().hasRole("ADMIN") // ANY OTHER REQUEST NOT MATCHED ABOVE!
	            .and()
	        .formLogin()
	            .and()
	        .httpBasic();
	}