Remove formLogin() and httpBasic() from defaults

This commit is contained in:
Rob Winch
2017-10-12 16:20:38 -05:00
parent 5fae710d69
commit 211e8eae90
4 changed files with 10 additions and 4 deletions

View File

@@ -36,10 +36,12 @@ public class SecurityConfig {
@Bean
SecurityWebFilterChain springWebFilterChain(ServerHttpSecurity http) throws Exception {
return http
// we rely on method security
// Demonstrate that method security works
// Best practice to use both for defense in depth
.authorizeExchange()
.anyExchange().permitAll()
.and()
.httpBasic().and()
.build();
}