How to use

HttpSecurity

in

org.springframework.security.config.annotation.web.builders

@Override
protected void configure(HttpSecurity http) throws Exception {
  // @formatter:off
  http.anonymous().disable()
    .antMatcher("/oauth/token")
    .authorizeRequests().anyRequest().authenticated()
  .and()
    .httpBasic().authenticationEntryPoint(authenticationEntryPoint())
  .and()
    .csrf().requireCsrfProtectionMatcher(new AntPathRequestMatcher("/oauth/token")).disable()
    .exceptionHandling().accessDeniedHandler(accessDeniedHandler())
  .and()
    .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
  // @formatter:on
}

@Override
protected void configure(HttpSecurity http) throws Exception {
 http.csrf().disable();
 http.headers().frameOptions().sameOrigin();
 http.authorizeRequests()
   .antMatchers("/openapi/**", "/vendor/**", "/styles/**", "/scripts/**", "/views/**", "/img/**").permitAll()
   .antMatchers("/**").authenticated();
 http.formLogin().loginPage("/signin").permitAll().failureUrl("/signin?#/error").and().httpBasic();
 SimpleUrlLogoutSuccessHandler urlLogoutHandler = new SimpleUrlLogoutSuccessHandler();
 urlLogoutHandler.setDefaultTargetUrl("/signin?#/logout");
 http.logout().logoutUrl("/user/logout").invalidateHttpSession(true).clearAuthentication(true)
   .logoutSuccessHandler(urlLogoutHandler);
 http.exceptionHandling().authenticationEntryPoint(new LoginUrlAuthenticationEntryPoint("/signin"));
}

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http.csrf().disable();
    http
      .authorizeRequests()
        .antMatchers("/actuator/**").permitAll()
        .anyRequest().authenticated()
      .and()
        .httpBasic()
        ;
  }
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  // @formatter:off
  http
      .authorizeRequests().anyRequest().authenticated()
      .and()
      .csrf().disable();
  // @formatter:on
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  // @formatter:off	
  http.addFilterBefore(resourceFilter, AbstractPreAuthenticatedProcessingFilter.class)
    .requestMatcher(new NegatedRequestMatcher(new AntPathRequestMatcher("/oauth/**")))
    .authorizeRequests().anyRequest().authenticated().expressionHandler(new OAuth2WebSecurityExpressionHandler())
  .and()
    .anonymous().disable()
    .csrf().disable()
    .exceptionHandling()
      .authenticationEntryPoint(new OAuth2AuthenticationEntryPoint())
      .accessDeniedHandler(new OAuth2AccessDeniedHandler());
  // @formatter:on
}

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests()//配置权限
//                .antMatchers("/").access("hasRole('TEST')")//该路径需要TEST角色
        .antMatchers("/").authenticated()//该路径需要登录认证
//                .antMatchers("/brand/list").hasAuthority("TEST")//该路径需要TEST权限
        .antMatchers("/**").permitAll()
        .and()//启用基于http的认证
        .httpBasic()
        .realmName("/")
        .and()//配置登录页面
        .formLogin()
        .loginPage("/login")
        .failureUrl("/login?error=true")
        .and()//配置退出路径
        .logout()
        .logoutSuccessUrl("/")
//                .and()//记住密码功能
//                .rememberMe()
//                .tokenValiditySeconds(60*60*24)
//                .key("rememberMeKey")
        .and()//关闭跨域伪造
        .csrf()
        .disable()
        .headers()//去除X-Frame-Options
        .frameOptions()
        .disable();
  }

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    // @formatter:off
    SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
    successHandler.setTargetUrlParameter( "redirectTo" );

    http.authorizeRequests()
        .antMatchers( adminContextPath + "/assets/**" ).permitAll()
        .antMatchers( adminContextPath + "/login" ).permitAll()
        .anyRequest().authenticated()
        .and()
        .formLogin().loginPage( adminContextPath + "/login" ).successHandler( successHandler ).and()
        .logout().logoutUrl( adminContextPath + "/logout" ).and()
        .httpBasic().and()
        .csrf().disable();
    // @formatter:on
  }
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  http
    .authorizeRequests()
    .anyRequest().authenticated().and()
    // custom token authorize exception handler
    .exceptionHandling()
    .authenticationEntryPoint(unauthorizedHandler).and()
    // since we use jwt, session is not necessary
    .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
    // since we use jwt, csrf is not necessary
    .csrf().disable();
  http.addFilterBefore(new JwtAuthenticationTokenFilter(tokenProvider), UsernamePasswordAuthenticationFilter.class);
  // disable cache
  http.headers().cacheControl();
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  http
      .authorizeRequests()
      .antMatchers("/resources/**").permitAll()
      .anyRequest().authenticated()
      .and()
      .formLogin()
      .loginPage("/login")
      .permitAll()
      .and()
      .logout()
      .permitAll()
      .and()
      .csrf().disable();
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  http
      .authorizeRequests()
      .antMatchers("/user/**").authenticated()
      .anyRequest().permitAll()
      .and()
      .formLogin()
      .loginPage("/login")
      .defaultSuccessUrl("/user", true)
      .permitAll()
      .and()
      .logout()
      .permitAll()
      .and().portMapper().http(port).mapsTo(sslPort)
      .and().csrf().disable();
  http.rememberMe().alwaysRemember(true);
  http.addFilterAt(qqAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
  http.addFilterAt(githubAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
}

    .authorizeRequests();
  registry.antMatchers(url).permitAll();
registry.and()
    .formLogin()
    .loginPage("/xboot/common/needLogin")
    .headers().frameOptions().disable()
    .and()
    .logout()
    .permitAll()
    .and()
    .authorizeRequests()
    .csrf().disable()
    .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
    .and()
    .exceptionHandling().accessDeniedHandler(accessDeniedHandler)
    .and()
    .addFilterBefore(myFilterSecurityInterceptor, FilterSecurityInterceptor.class)
    .addFilter(new JWTAuthenticationFilter(authenticationManager(), tokenRedis, tokenExpireTime, redisTemplate));

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    // Page with login form is served as /login.html and does a POST on /login
    http.formLogin().loginPage("/login.html").loginProcessingUrl("/login").permitAll();
    // The UI does a POST on /logout on logout
    http.logout().logoutUrl("/logout");
    // The ui currently doesn't support csrf
    http.csrf().disable();
    // Requests for the login page and the static assets are allowed
    http.authorizeRequests()
        .antMatchers("/login.html", "/**/*.css", "/img/**", "/third-party/**")
        .permitAll();
    // ... and any other request needs to be authorized
    http.authorizeRequests().antMatchers("/**").authenticated();
    // Enable so that the clients can authenticate via HTTP basic for registering
    http.httpBasic();
  }
}

@Override
protected void configure(HttpSecurity http) throws Exception {
  http.authorizeRequests()
      .antMatchers(HttpMethod.GET, // 允许对于网站静态资源的无授权访问
          "/",
          "/*.html",
          "/v2/api-docs/**"
      .permitAll()
      .exceptionHandling()
      .accessDeniedHandler(new GoAccessDeniedHandler())
      .authenticationEntryPoint(new GoAuthenticationEntryPoint())
      .and()
      .formLogin()
      .loginPage("/sso/login")
      .successHandler(new GoAuthenticationSuccessHandler())
      .failureHandler(new GoAuthenticationFailureHandler())
      .and()
      .logout()
      .logoutUrl("/sso/logout")
      .logoutSuccessHandler(new GoLogoutSuccessHandler())
      .invalidateHttpSession(true)
      .csrf()
      .disable();//开启basic认证登录后可以调用需要认证的接口

  /**
   * Configure.
   *
   * @param http the http
   *
   * @throws Exception the exception
   */
  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http.headers().frameOptions().disable()
        .and()
        .formLogin()
        .loginPage("/login.html")
        .loginProcessingUrl("/login")
        .and()
        .logout().logoutUrl("/logout")
        .and()
        .csrf().disable()
        .authorizeRequests()
        .antMatchers("/api/**", "/applications/**", "/api/applications/**", "/login.html", "/**/*.css", "/img/**", "/third-party/**")
        .permitAll()
        .anyRequest().authenticated();
  }
}