From 883b827d9210e5b0375cd00cafbd50ae0847df38 Mon Sep 17 00:00:00 2001 From: Josh Cummings Date: Mon, 20 May 2024 09:44:20 -0600 Subject: [PATCH] Revert AuthorizeHttpRequests#forServletPattern See issue spring-projects/spring-security#13562 for details --- .../example/security/webmvc/WebSecurityConfig.java | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/security/security-webmvc/src/main/java/com/example/security/webmvc/WebSecurityConfig.java b/security/security-webmvc/src/main/java/com/example/security/webmvc/WebSecurityConfig.java index b8ff49f..66e6c0f 100644 --- a/security/security-webmvc/src/main/java/com/example/security/webmvc/WebSecurityConfig.java +++ b/security/security-webmvc/src/main/java/com/example/security/webmvc/WebSecurityConfig.java @@ -17,13 +17,13 @@ public class WebSecurityConfig { @Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { - return http.authorizeHttpRequests(authorize -> authorize.forServletPattern("/", - (r) -> r.requestMatchers("/rest/anonymous") - .permitAll() - .requestMatchers("/rest/admin") - .hasRole("ADMIN") - .anyRequest() - .authenticated())) + return http + .authorizeHttpRequests(authorize -> authorize.requestMatchers("/rest/anonymous") + .permitAll() + .requestMatchers("/rest/admin") + .hasRole("ADMIN") + .anyRequest() + .authenticated()) .httpBasic(Customizer.withDefaults()) .build(); }