|
1 | 1 | /*
|
2 |
| - * Copyright 2012-2023 the original author or authors. |
| 2 | + * Copyright 2012-2024 the original author or authors. |
3 | 3 | *
|
4 | 4 | * Licensed under the Apache License, Version 2.0 (the "License");
|
5 | 5 | * you may not use this file except in compliance with the License.
|
|
28 | 28 | import org.springframework.context.annotation.Import;
|
29 | 29 | import org.springframework.core.annotation.Order;
|
30 | 30 | import org.springframework.security.config.BeanIds;
|
| 31 | +import org.springframework.security.config.Customizer; |
31 | 32 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
32 | 33 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
33 | 34 | import org.springframework.security.oauth2.core.AuthorizationGrantType;
|
34 | 35 | import org.springframework.security.oauth2.core.ClientAuthenticationMethod;
|
35 | 36 | import org.springframework.security.oauth2.server.authorization.client.InMemoryRegisteredClientRepository;
|
36 | 37 | import org.springframework.security.oauth2.server.authorization.client.RegisteredClient;
|
37 | 38 | import org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository;
|
38 |
| -import org.springframework.security.oauth2.server.authorization.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration; |
| 39 | +import org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.OAuth2AuthorizationServerConfigurer; |
39 | 40 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcClientRegistrationEndpointFilter;
|
40 | 41 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcProviderConfigurationEndpointFilter;
|
41 | 42 | import org.springframework.security.oauth2.server.authorization.oidc.web.OidcUserInfoEndpointFilter;
|
@@ -163,7 +164,11 @@ static class TestSecurityFilterChainConfiguration {
|
163 | 164 | @Bean
|
164 | 165 | @Order(1)
|
165 | 166 | SecurityFilterChain authServerSecurityFilterChain(HttpSecurity http) throws Exception {
|
166 |
| - OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http); |
| 167 | + OAuth2AuthorizationServerConfigurer authorizationServer = OAuth2AuthorizationServerConfigurer |
| 168 | + .authorizationServer(); |
| 169 | + http.securityMatcher(authorizationServer.getEndpointsMatcher()) |
| 170 | + .with(authorizationServer, Customizer.withDefaults()); |
| 171 | + http.authorizeHttpRequests((authorize) -> authorize.anyRequest().authenticated()); |
167 | 172 | return http.build();
|
168 | 173 | }
|
169 | 174 |
|
|
0 commit comments