Tworze aplikacje w Spring boot i postanowiłem dołożyć do tego Spring security.
Zauważyłem,że mam zablokowany dostep do folderu resources/static ponieważ moja strona nie ma dostepu do plikow css oraz scryptow.
Dostaje ponizsze informacje:
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-3] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-6] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-4] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-5] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-2] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.173 INFO 3576 --- [ XNIO-2 task-7] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.183 INFO 3576 --- [ XNIO-2 task-8] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
2015-08-25 12:03:46.183 INFO 3576 --- [ XNIO-2 task-10] o.s.b.a.audit.listener.AuditListener : AuditEvent [timestamp=Tue Aug 25 12:03:46 CEST 2015, principal=anonymousUser, type=AUTHORIZATION_FAILURE, data={type=org.springframework.security.access.AccessDeniedException, message=Dostęp zabroniony}]
W jaki sposób odblokowac dostep do tego folderu. Moja konfiguracja wyglada tak:
@Configuration
@EnableWebMvcSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter{
@Override
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers("/welcome").permitAll()
.anyRequest().authenticated()
.and().
formLogin().permitAll()
.and().
logout()
.permitAll();
}
@Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
auth
.inMemoryAuthentication()
.withUser("user").password("password").roles("USER");
}