Portfolio


http.httpBasic()


// 설정 방법
public class SecurityConfig extends WebSecurityConfigurerAdapter {
  @Override
  protected void configure(HttpSecurity http) throws Exception {
      http.httpBasic();
  }
}


@Override
	protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain)
			throws IOException, ServletException {
		try {
			UsernamePasswordAuthenticationToken authRequest = this.authenticationConverter.convert(request);
			if (authRequest == null) {
				this.logger.trace("Did not process authentication request since failed to find "
						+ "username and password in Basic Authorization header");
				chain.doFilter(request, response);
				return;
			}
			String username = authRequest.getName();
			this.logger.trace(LogMessage.format("Found username '%s' in Basic Authorization header", username));
			if (authenticationIsRequired(username)) {
				Authentication authResult = this.authenticationManager.authenticate(authRequest);
				SecurityContextHolder.getContext().setAuthentication(authResult);
				if (this.logger.isDebugEnabled()) {
					this.logger.debug(LogMessage.format("Set SecurityContextHolder to %s", authResult));
				}
				this.rememberMeServices.loginSuccess(request, response, authResult);
				onSuccessfulAuthentication(request, response, authResult);
			}
		}
		catch (AuthenticationException ex) {
			SecurityContextHolder.clearContext();
			this.logger.debug("Failed to process authentication request", ex);
			this.rememberMeServices.loginFail(request, response);
			onUnsuccessfulAuthentication(request, response, ex);
			if (this.ignoreFailure) {
				chain.doFilter(request, response);
			}
			else {
				this.authenticationEntryPoint.commence(request, response, ex);
			}
			return;
		}

		chain.doFilter(request, response);
	}


@DisplayName("1. 인증 실패")
@Test
void test_1(){
    HttpClientErrorException exception = assertThrows(HttpClientErrorException.class, () ->{
        client.getForObject(greetingUrl(), String.class);
    });
    assertEquals(401, exception.getRawStatusCode());
}

@DisplayName("2. 인증 성공")
@Test
void test_2(){
    HttpHeaders headers = new HttpHeaders();
    headers.add(HttpHeaders.AUTHORIZATION, "Basic " + Base64.getEncoder().encodeToString(
            "user1:1111".getBytes()
    ));
    HttpEntity entity = new HttpEntity(null, headers);
    ResponseEntity<String> res = client.exchange(greetingUrl(), HttpMethod.GET, entity, String.class);
    assertEquals("hello", res.getBody());
    System.out.println(res.getBody());
}

@DisplayName("3. 인증성공2")
@Test
void test_3(){ 
    TestRestTemplate testClient = new TestRestTemplate("user1", "1111");
    String res = testClient.getForObject(greetingUrl(), String.class);
    assertEquals("hello", res);
}

@DisplayName("4. Post 인증")
@Test
void test_4(){
    TestRestTemplate testClient = new TestRestTemplate("user1", "1111");
    ResponseEntity<String> res = testClient.postForEntity(greetingUrl(), "jongwon", String.class);
    assertEquals("hello jongwon", res.getBody());
}


@Override
protected void configure(HttpSecurity http) throws Exception {
    http
            .csrf().disable()
            .authorizeRequests().anyRequest().authenticated() // permitAll()
            .and()
            .httpBasic();
}