|
1 | 1 | /* |
2 | | - * Copyright 2012-2023 the original author or authors. |
| 2 | + * Copyright 2012-2024 the original author or authors. |
3 | 3 | * |
4 | 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
5 | 5 | * you may not use this file except in compliance with the License. |
|
28 | 28 | import org.springframework.context.annotation.Import; |
29 | 29 | import org.springframework.core.annotation.Order; |
30 | 30 | import org.springframework.security.config.BeanIds; |
| 31 | +import org.springframework.security.config.Customizer; |
31 | 32 | import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
32 | 33 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; |
33 | 34 | import org.springframework.security.oauth2.core.AuthorizationGrantType; |
34 | 35 | import org.springframework.security.oauth2.core.ClientAuthenticationMethod; |
35 | 36 | import org.springframework.security.oauth2.server.authorization.client.InMemoryRegisteredClientRepository; |
36 | 37 | import org.springframework.security.oauth2.server.authorization.client.RegisteredClient; |
37 | 38 | import org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository; |
38 | | -import org.springframework.security.oauth2.server.authorization.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration; |
| 39 | +import org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.OAuth2AuthorizationServerConfigurer; |
39 | 40 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcClientRegistrationEndpointFilter; |
40 | 41 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcProviderConfigurationEndpointFilter; |
41 | 42 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcUserInfoEndpointFilter; |
@@ -163,7 +164,11 @@ static class TestSecurityFilterChainConfiguration { |
163 | 164 | @Bean |
164 | 165 | @Order(1) |
165 | 166 | SecurityFilterChain authServerSecurityFilterChain(HttpSecurity http) throws Exception { |
166 | | - OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http); |
| 167 | + OAuth2AuthorizationServerConfigurer authorizationServer = OAuth2AuthorizationServerConfigurer |
| 168 | + .authorizationServer(); |
| 169 | + http.securityMatcher(authorizationServer.getEndpointsMatcher()) |
| 170 | + .with(authorizationServer, Customizer.withDefaults()); |
| 171 | + http.authorizeHttpRequests((authorize) -> authorize.anyRequest().authenticated()); |
167 | 172 | return http.build(); |
168 | 173 | } |
169 | 174 |
|
|
0 commit comments