updated security config

xpinjection · Sep 15, 2023 · e3917b2 · e3917b2
1 parent 4aa86ea
commit e3917b2
Showing 1 changed file with 6 additions and 7 deletions.
diff --git a/src/main/java/com/xpinjection/library/config/ActuatorBasicSecurityConfig.java b/src/main/java/com/xpinjection/library/config/ActuatorBasicSecurityConfig.java
@@ -5,9 +5,12 @@
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
 import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.web.SecurityFilterChain;
 
+import static org.springframework.security.config.Customizer.withDefaults;
+
 @Configuration
 @RequiredArgsConstructor
 public class ActuatorBasicSecurityConfig {
@@ -19,13 +22,9 @@ public SecurityFilterChain filterChain(HttpSecurity http, WebEndpointProperties
                                 .requestMatchers(actuatorBasePath + "/**").hasRole("ADMIN")
                                 .requestMatchers("/**").permitAll()
                                 .anyRequest().authenticated())
-            .httpBasic()
-                .and()
-            .sessionManagement()
-                .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
-                .and()
-            .csrf()
-                .disable()
+            .httpBasic(withDefaults())
+            .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+            .csrf(AbstractHttpConfigurer::disable)
             .build();
     }
 }