인프런 커뮤니티 질문&답변

@Configuration
@EnableWebSecurity
@RequiredArgsConstructor
public class WebSecurity {

    private final UserService userService;
    private final BCryptPasswordEncoder bCryptPasswordEncoder;
    private final Environment environment;

    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http.csrf(AbstractHttpConfigurer::disable)
            .authorizeHttpRequests(request ->{
                request.requestMatchers(antMatcher("/actuator/**")).permitAll();
                request.requestMatchers(antMatcher("/**")).permitAll();})
            //            .headers(header -> header.frameOptions(
            //                frameOptionsConfig -> frameOptionsConfig.disable()))
            .apply(new MyCustomSecurity());

        return http.build();
    }

    public class MyCustomSecurity extends AbstractHttpConfigurer<MyCustomSecurity, HttpSecurity> {

        @Override
        public void configure(HttpSecurity http) throws Exception {

            AuthenticationManager authenticationManager = http.getSharedObject(
                AuthenticationManager.class);
            AuthenticationFilter authenticationFilter = new AuthenticationFilter(authenticationManager, userService, environment);
            http.addFilter(authenticationFilter);
        }

        protected void configure2(AuthenticationManagerBuilder auth) throws Exception {
            auth.userDetailsService(userService).passwordEncoder(bCryptPasswordEncoder);
        }

    }

}

해당 코드는 앞 내용까지 포함하여 설정이 적용된 버전입니다. 

저같은 경우는 처음부터 mysql로 진행하여서 h2 콘솔을 사용하지 않아 frameOptions를 주석처리 하였으나, 혹여나 h2 콘솔 사용하시는 분은 주석 해제 후 사용하시면 되고, 23.08.10 기준으로 hasIpAddress는 사용 불가능합니다.