SecurityConfig dla usługi restowej

PC34-SpringJersey/src/main/java/sklep/security/SecurityConfig.java

@@ -2,6 +2,7 @@ package sklep.security;
 
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
 import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
@@ -17,7 +18,10 @@ public class SecurityConfig {
     SecurityFilterChain setHttpSecurity(HttpSecurity httpSecurity) throws Exception {
         httpSecurity
             .authorizeHttpRequests((authz) -> authz
-                    .anyRequest().permitAll()
+                    .requestMatchers(HttpMethod.GET).permitAll()
+                    .requestMatchers(HttpMethod.POST).hasRole("manager")
+                    .requestMatchers(HttpMethod.PUT).hasRole("manager")
+                    .requestMatchers(HttpMethod.DELETE).hasRole("manager")
                 )
             .httpBasic(Customizer.withDefaults())
             .csrf(config -> config.disable());