How permit some specific path Spring Security?

Asked Mar 27 '21 at 23:10

Active Mar 28 '21 at 00:01

Viewed 319 times

I know that already have a lot of questions equals... But nothing works and I am going to be crazy.

I have had implementing JWT authentication in a Spring project and my Security configurer is here:

    @Override
    protected void configure(HttpSecurity httpSecurity) throws Exception {
        httpSecurity
            .csrf().disable()
            .authorizeRequests()
                .antMatchers("/auth/**").permitAll()
                .anyRequest().authenticated()
                .and()
            .exceptionHandling()
                .authenticationEntryPoint(unauthorizedHandler)
                .and()
            .sessionManagement()
                .sessionCreationPolicy(SessionCreationPolicy.STATELESS);

        httpSecurity
            .addFilterBefore(authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class);

        httpSecurity
            .headers().cacheControl();
    }

    @Override
    public void configure(WebSecurity web) throws Exception {
        web.ignoring().antMatchers("/auth/**");
    }

But all path require token.... I am already try to use @Secured("permitAll") in my controller class but also doesn't work.

edited Mar 28 '21 at 00:01

dur

15,689
25
79
125

asked Mar 27 '21 at 23:10

Develop_SP

1

/auth/login -> 401 x( – Develop_SP Mar 28 '21 at 02:06
yes.... the class is correct, i think that can be the pointer – Develop_SP Mar 28 '21 at 17:11
In reallity maybe this filter that is before all calls? – Develop_SP Mar 28 '21 at 17:25
Did you annotate `authenticationTokenFilterBean`with `@Bean`? – dur Mar 28 '21 at 19:40
Does this answer your question? [Filter invoke twice when register as Spring bean](https://stackoverflow.com/questions/39314176/filter-invoke-twice-when-register-as-spring-bean) – dur Mar 28 '21 at 19:43
why are you implementing a custom jwt filter when there is already one implemented in spring security that you can customize? read the docs – Toerktumlare Mar 29 '21 at 16:18
yeah, I change al the code to use spring security, now it's works. Thanks guys! – Develop_SP Mar 29 '21 at 22:33

How permit some specific path Spring Security?

0 Answers0