Subversion Repositories SmartDukaan

package com.spice.profitmandi.web.config;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.context.annotation.Configuration;

import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;

import org.springframework.security.config.annotation.web.builders.HttpSecurity;

import org.springframework.security.config.annotation.web.builders.WebSecurity;

import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;

import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@Configuration

@EnableWebSecurity

public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

	@Autowired

	private MyBasicAuthenticationEntryPoint myBasicAuthenticationEntryPoint;

	@Override

	public void configure(WebSecurity web) throws Exception {

		web.ignoring().antMatchers("/resources/**").antMatchers("/spicemoney/callback");

	}

	@Override

	protected void configure(HttpSecurity http) throws Exception {

		http.logout().logoutUrl("logmeout").and().cors().disable().csrf().disable()

				.headers().frameOptions().sameOrigin().and()

				.authorizeRequests()

				// .antMatchers("/**").hasRole("hdfc")

				.antMatchers("/hdfc/**").hasRole("hdfc")

				.antMatchers("/imei/validate").hasRole("paytail")

				.antMatchers("/sales/logix").hasRole("logix")

				.antMatchers("/hdfctest/**").hasRole("hdfctest").antMatchers("/**").permitAll().and().httpBasic()

				.authenticationEntryPoint(myBasicAuthenticationEntryPoint);

	}

	@Autowired

	protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {

		auth.inMemoryAuthentication()

				.withUser("hdfcuser").password("sd123$%^aGg").roles("hdfc").and()

				.withUser("hdfctestuser").password("test").roles("hdfctest").and()

				.withUser("paytail").password("$SDP@yTa!l").roles("paytail").and()

				.withUser("logix").password("L()G!xM@!!").roles("logix");

	}

}