security - domyślna konfiguracja zapisana explicite

PC30-SklepSpring/src/main/java/sklep/security/SecurityConfig.java

@@ -2,6 +2,7 @@ package sklep.security;
 
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.web.SecurityFilterChain;
 
@@ -11,7 +12,8 @@ public class SecurityConfig {
 	@Bean
 	SecurityFilterChain configHttpSecurity(HttpSecurity httpSecurity) throws Exception {
 		httpSecurity
-			.authorizeHttpRequests(authz -> authz.anyRequest().permitAll())
+			.authorizeHttpRequests(authz -> authz.anyRequest().authenticated())
+			.formLogin(Customizer.withDefaults())
 //			.csrf(authz -> authz.disable())
 		;