InMemoryUserDetailsManager

PC27-SklepSpring/src/main/java/sklep/security/SecurityConfig.java

@@ -5,6 +5,9 @@ import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.provisioning.InMemoryUserDetailsManager;
 import org.springframework.security.web.SecurityFilterChain;
 
 @Configuration
@@ -21,9 +24,20 @@ public class SecurityConfig {
     SecurityFilterChain configHttpSecurity(HttpSecurity httpSecurity) throws Exception {
         httpSecurity.authorizeHttpRequests(authz -> authz
                 .anyRequest().authenticated()
-            ).httpBasic(Customizer.withDefaults())
+            ).formLogin(Customizer.withDefaults())
         ;
         return httpSecurity.build();
     }
     
+    // Aspektem konfiguracji, który jest podawany w innej metodzie, jest zdefiniowany zbiór użytkowników.
+    // W tej wersji definiujemy użytkowników w kodzie aplikacji ("in memory").
+    @Bean
+    public InMemoryUserDetailsManager userDetailsService() {
+        UserDetails[] users = {
+                User.withUsername("ala").password("{noop}ala123").roles("manager", "worker").build(),
+                User.withUsername("ola").password("{noop}ola123").roles("worker").build(),
+        };
+        return new InMemoryUserDetailsManager(users);
+    }
+
 }