Spring Boot security

[holman khan]

Machan spring boot waldi spring security /login ekata controller ekak liyanne nathuwa puluwan da wada krana widiyata hadanna , meke JWT filter ehemath thiyanawa

 

[u_make_me_sick_]

Spring-Boot security

 

[priyanka_hdp]

Machan spring boot waldi spring security /login ekata controller ekak liyanne nathuwa puluwan da wada krana widiyata hadanna , meke JWT filter ehemath thiyanawa

Interesting.. refer to the class in your source which extends WebSecurityConfigurerAdapter
It has all the configurations machan. it could be handled by controller or without controller

JWT uses for authorization not authentication

@Override
protected void configure(HttpSecurity httpSecurity) throws Exception {
    httpSecurity.cors().and().csrf().disable()
            .authorizeRequests().
            .anyRequest().authenticated()
            and().
            exceptionHandling()
                .authenticationEntryPoint(jwtAuthenticationEntryPoint)
                    .and()
                        .sessionManagement()
                            .sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    httpSecurity.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class);
}

 

[kinkon]

බම්ප්