SecurityConfigurations.java

SecurityConfigurations.java

@Configuration
@EnableWebSecurity
public class SecurityConfigurations {

  @Autowired
  private SecurityFilter securityFilter;

  @Bean
  public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
      return http.csrf().disable()
          .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
          .and().authorizeHttpRequests()
          .requestMatchers(HttpMethod.POST, "/login").permitAll()
          .requestMatchers(HttpMethod.DELETE, "/medicos").hasRole("ADMIN")
          .requestMatchers(HttpMethod.DELETE, "/pacientes").hasRole("ADMIN")
          .anyRequest().authenticated()
          .and().addFilterBefore(securityFilter, UsernamePasswordAuthenticationFilter.class)
          .build();
  }
  @Bean
  public AuthenticationManager authenticationManager(AuthenticationConfiguration configuration) throws Exception {
      return configuration.getAuthenticationManager();
  }

  @Bean
  public PasswordEncoder passwordEncoder() {
      return new BCryptPasswordEncoder();
  }

}