Browse Source

Polish HttpSecurity

pull/11670/head
Steve Riesenberg 4 years ago committed by Steve Riesenberg
parent
commit
07ea139ebf
  1. 130
      config/src/main/java/org/springframework/security/config/annotation/web/builders/HttpSecurity.java

130
config/src/main/java/org/springframework/security/config/annotation/web/builders/HttpSecurity.java

@ -408,23 +408,23 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .headers() * .headers()
* .contentTypeOptions() * .contentTypeOptions()
* .and() * .and()
* .xssProtection() * .xssProtection()
* .and() * .and()
* .cacheControl() * .cacheControl()
* .and() * .and()
* .httpStrictTransportSecurity() * .httpStrictTransportSecurity()
* .and() * .and()
* .frameOptions() * .frameOptions()
* .and() * .and()
* ...; * ...;
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* *
@ -435,13 +435,13 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .headers().disable() * .headers().disable()
* ...; * ...;
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* *
@ -456,18 +456,18 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .headers() * .headers()
* .defaultsDisabled() * .defaultsDisabled()
* .cacheControl() * .cacheControl()
* .and() * .and()
* .frameOptions() * .frameOptions()
* .and() * .and()
* ...; * ...;
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* *
@ -480,16 +480,16 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .headers() * .headers()
* .frameOptions() * .frameOptions()
* .disable() * .disable()
* .and() * .and()
* ...; * ...;
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* @return the {@link HeadersConfigurer} for further customizations * @return the {@link HeadersConfigurer} for further customizations
@ -625,12 +625,12 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CorsSecurityConfig { * public class CorsSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .cors(withDefaults()); * .cors(withDefaults());
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* @param corsCustomizer the {@link Customizer} to provide more options for the * @param corsCustomizer the {@link Customizer} to provide more options for the
@ -1836,13 +1836,13 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .csrf().disable() * .csrf().disable()
* ...; * ...;
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* @return the {@link CsrfConfigurer} for further customizations * @return the {@link CsrfConfigurer} for further customizations
@ -1862,12 +1862,12 @@ public final class HttpSecurity extends AbstractConfiguredSecurityBuilder<Defaul
* &#064;EnableWebSecurity * &#064;EnableWebSecurity
* public class CsrfSecurityConfig { * public class CsrfSecurityConfig {
* *
* &#064;Bean * &#064;Bean
* public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { * public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
* http * http
* .csrf((csrf) -&gt; csrf.disable()); * .csrf((csrf) -&gt; csrf.disable());
* return http.build(); * return http.build();
* } * }
* } * }
* </pre> * </pre>
* @param csrfCustomizer the {@link Customizer} to provide more options for the * @param csrfCustomizer the {@link Customizer} to provide more options for the

Loading…
Cancel
Save