tilman/next-transactions
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

getting ready for production

Browse Source
This commit is contained in:
Tilman Liero
2016-07-17 01:14:34 +02:00
parent b423467074
commit 01bde31297
6 changed files with 61 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main/java/de/tilman/transactions/Application.java
+37 -53
View File
@@ -1,67 +1,51 @@
package de.tilman.transactions;
import javax.annotation.PostConstruct;
import org.h2.server.web.WebServlet;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.context.embedded.ServletRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.authority.AuthorityUtils;
import org.springframework.security.core.context.SecurityContextHolder;
import de.tilman.transactions.domain.Account;
import de.tilman.transactions.domain.User;
import de.tilman.transactions.repository.AccountRepository;
import de.tilman.transactions.repository.UserRepository;
@SpringBootApplication
public class Application {
public static void main(String[] args) {
SpringApplication.run(Application.class);
}
private static final Logger log = LoggerFactory.getLogger(Application.class);
// private static final Logger log = LoggerFactory.getLogger(Application.class);
//
// @Autowired UserRepository userRepository;
// @Autowired AccountRepository accountRepository;
//
//
// // XXX for dev
// @PostConstruct
// public void init() {
//
// /**
// * Due to method-level protections the security context must be loaded
// * with an authentication token containing the necessary privileges.
// */
// SecurityContextHolder.getContext().setAuthentication(
// new UsernamePasswordAuthenticationToken("system", "system", AuthorityUtils.createAuthorityList("ROLE_ADMIN", "ROLE_USER")));
//
// log.info("Users:");
// for (User user : userRepository.findAll()) {
// log.info(user.getId() + ", " + user.getName());
// }
//
// log.info("Accounts:");
// for (Account account : accountRepository.findAll()) {
// log.info(account.getId() + ", " + account.getName() /* + ", " + account.getOwner().getName() */);
// }
//
// SecurityContextHolder.clearContext();
// }
@Autowired UserRepository userRepository;
@Autowired AccountRepository accountRepository;
// XXX for dev
@PostConstruct
public void init() {
/**
* Due to method-level protections the security context must be loaded
* with an authentication token containing the necessary privileges.
*/
SecurityContextHolder.getContext().setAuthentication(
new UsernamePasswordAuthenticationToken("system", "system", AuthorityUtils.createAuthorityList("ROLE_ADMIN", "ROLE_USER")));
log.info("Users:");
for (User user : userRepository.findAll()) {
log.info(user.getId() + ", " + user.getName());
}
log.info("Accounts:");
for (Account account : accountRepository.findAll()) {
log.info(account.getId() + ", " + account.getName() /* + ", " + account.getOwner().getName() */);
}
SecurityContextHolder.clearContext();
}
// XXX for dev - make H2 database available as jdbc:h2:mem:testdb at /console (https://springframework.guru/using-the-h2-database-console-in-spring-boot-with-spring-security/)
@Bean
public ServletRegistrationBean h2servletRegistration() {
ServletRegistrationBean registration = new ServletRegistrationBean(new WebServlet());
registration.addUrlMappings("/console/*");
return registration;
}
// // XXX for dev - make H2 database available as jdbc:h2:mem:testdb at /console (https://springframework.guru/using-the-h2-database-console-in-spring-boot-with-spring-security/)
// @Bean
// public ServletRegistrationBean h2servletRegistration() {
// ServletRegistrationBean registration = new ServletRegistrationBean(new WebServlet());
// registration.addUrlMappings("/console/*");
// return registration;
// }
}
src/main/java/de/tilman/transactions/SecurityConfiguration.java
+2 -2
View File
@@ -26,13 +26,13 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
// Basis-Schutz: Nur autorisierte Zugriffe (feingranulare Steuerung über Assertions)
http.authorizeRequests()
.antMatchers(HttpMethod.GET, "/public/**").permitAll()
.antMatchers("/console/**").permitAll()
// .antMatchers("/console/**").permitAll() // H2 console
.anyRequest().authenticated();
http.httpBasic(); // XXX mit HTTP Basic Auth funktioniert der Logout nicht richtig
// http.formLogin();
http.csrf().disable(); // XXX später wieder aktivieren
http.headers().frameOptions().disable();
// http.headers().frameOptions().disable(); // for H2 console
}
}
src/main/resources/application.properties
+11 -3
View File
@@ -1,5 +1,13 @@
spring.datasource.platform=h2
security.user.name=sa
security.user.password=
server.port=8084
# for production
spring.jpa.hibernate.ddl-auto=none
spring.datasource.url=jdbc:h2:tcp://localhost/transactions
spring.datasource.username=sa
spring.datasource.password=PASSWORD
server.port=8080