spring-security-jpa.zip

Hello,

I am getting a HTTP 403 when trying to add a new user after adding the url authorization rules. I have configured it the same as you mentioned in the youtube video and in this repository. Can you please let me know what could be the issue. I am attaching the code I am using as well.

thank for video .

I have implemented with spring 5.

return user.getRoles().stream().map(role -> new SimpleGrantedAuthority(""+role))
.collect(Collectors.toList());
the hight light work for me. why not ROLE_ADMIN or ROLE_USER

@PreAuthorize("hasAnyRole('ADMIN')") not working

I Have checked your code an unable to figure out, how you have set userDetails object to user object in "CustomUserDetailsService" class . Since there is no such "setUser"method defined in "CustomUserDetails" class.

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.csrf().disable();
    http.authorizeRequests()
            .antMatchers("/rest/**").authenticated()
            .anyRequest().permitAll()
            .and()
            .authorizeRequests()
            .antMatchers("/secure/**").authenticated()
            .anyRequest().hasAnyRole("ADMIN")
            .and()
            .formLogin().permitAll();
}

@basahota Above is my configure overriden methd.
Still I am getting below mentioned error:

1. Can't configure antMatchers after anyRequest.

2. Failed to instantiate [javax.servlet.Filter]: Factory method 'springSecurityFilterChain' threw exception;