Configurando o Resource Server com a nova stack do Spring Security

.jpb/jpb-settings.xml

@@ -4,7 +4,7 @@
     <persistence-units>
       <persistence-unit moduleName="algafood" name="Default">
         <packages>
-          <package value="com.algaworks.algafood" />
+          <package value="com.tallyto.algafood" />
         </packages>
       </persistence-unit>
     </persistence-units>

pom.xml

@@ -197,6 +197,17 @@
             <version>2.2.224</version>
             <scope>test</scope>
         </dependency>
+
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
+        </dependency>
+
+        <dependency>
+            <groupId>com.nimbusds</groupId>
+            <artifactId>oauth2-oidc-sdk</artifactId>
+            <version>6.21.2</version>
+        </dependency>
     </dependencies>
 
 
@@ -237,6 +248,15 @@
                 <enabled>false</enabled>
             </releases>
         </repository>
+        <repository>
+            <id>central</id>
+            <name>Maven Central</name>
+            <layout>default</layout>
+            <url>https://repo1.maven.org/maven2</url>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
     </repositories>
 
     <pluginRepositories>

src/main/java/com/tallyto/algafood/api/v1/assembler/CidadeModelAssembler.java

@@ -16,14 +16,16 @@
 
 @Component
 public class CidadeModelAssembler extends RepresentationModelAssemblerSupport<Cidade, CidadeModel> {
-    @Autowired
-    ModelMapper modelMapper;
+    private final ModelMapper modelMapper;
 
-    @Autowired
-    LinkBuilder linkBuilder;
+    private final LinkBuilder linkBuilder;
 
-    public CidadeModelAssembler() {
+    @Autowired
+    public CidadeModelAssembler(ModelMapper modelMapper, LinkBuilder linkBuilder) {
         super(CidadeController.class, CidadeModel.class);
+
+        this.linkBuilder = linkBuilder;
+        this.modelMapper = modelMapper;
     }
 
     @Override

src/main/java/com/tallyto/algafood/core/security/WebSecurityConfig.java

@@ -3,46 +3,30 @@
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
-import org.springframework.security.config.http.SessionCreationPolicy;
-import org.springframework.security.core.userdetails.User;
-import org.springframework.security.core.userdetails.UserDetails;
-import org.springframework.security.core.userdetails.UserDetailsService;
-import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
-import org.springframework.security.crypto.password.PasswordEncoder;
-import org.springframework.security.provisioning.InMemoryUserDetailsManager;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector;
+import org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector;
 import org.springframework.security.web.SecurityFilterChain;
 
 @Configuration
+@EnableWebSecurity
 public class WebSecurityConfig {
 
-    @Bean
-    public static PasswordEncoder passwordEncoder() {
-        return new BCryptPasswordEncoder();
-    }
 
-    @Bean
-    public UserDetailsService userDetailsService() {
-
-        UserDetails peter = User.builder().username("tallyto").password(passwordEncoder().encode("tallyto@123")).roles("USER")
-            .build();
-
-        UserDetails admin = User.builder().username("admin").password(passwordEncoder().encode("admin")).roles("ADMIN")
-            .build();
-        return new InMemoryUserDetailsManager(peter,admin);
-    }
     @Bean
     public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
-        http.httpBasic()
-            .and()
-            .authorizeHttpRequests()
-                .antMatchers("/v1/cozinhas/**").permitAll()
+        http.authorizeHttpRequests()
                 .anyRequest().authenticated()
             .and()
-            .sessionManagement()
-                .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
-            .and()
-                .csrf().disable();
+                .oauth2ResourceServer().opaqueToken();
 
         return http.build();
     }
+
+
+    @Bean
+    public OpaqueTokenIntrospector introspector() {
+        return new NimbusOpaqueTokenIntrospector("http://localhost:3002/oauth/check_token", "algafood-web", "web123");
+    }
+
 }

src/main/resources/application-developer.properties

@@ -41,3 +41,6 @@ spring.mvc.pathmatch.matching-strategy=ant-path-matcher
 server.compression.enabled=true
 logging.loggly.token=${LOGGLY_TOKEN}
 
+spring.security.oauth2.resourceserver.opaquetoken.introspection-uri=http://localhost:3002/oauth/check_token
+spring.security.oauth2.resourceserver.opaquetoken.client-id=checktoken
+spring.security.oauth2.resourceserver.opaquetoken.client-secret=check123