do you have the latest configuration without using webconfigueradaptor ? it's depreciated and i am stuck here for implanting the config of authentication provider
Hi, I have added the ant matches for checking if a user role is allowed for the method. But what if I want to do a checking on the parameters as well. Let's say the south region manager is not allowed to insert any record with a place id that is from the northern region. So how do I stop this method at the authentication service?
Hey my friend have you tried to create custom Provider with the new SecurityFilterChain since WebSecurityConfigurerAdapter is deprecated? I've tried so many approaches for 2 days now and I can't even get DAOAuthenticartionProvider to work with SecurityFilterChain using HttpBasic auth. Even when my UserDetailsService is invoked on authentication, it seems it is not setup as the principal
do you have the latest configuration without using webconfigueradaptor ? it's depreciated and i am stuck here for implanting the config of authentication provider
WebSecurityConfigurerAdapter is deprecated
yes but the workflow and other are still same
Hi, I have added the ant matches for checking if a user role is allowed for the method.
But what if I want to do a checking on the parameters as well. Let's say the south region manager is not allowed to insert any record with a place id that is from the northern region. So how do I stop this method at the authentication service?
I believe you are referring to the method level security annotation, if that is the case, You can create custom PermissionEvaluator to handle it
What if we need to support both kind of providers, custom and dao?
You can always setup multiple auth provider with Spring security
Hi Can you make video on The Spring Authorization Server
Hello there.
I've just tried your website a couple minutes ago, but it can't be accessed.
Thanks Rama for informing the issue. This is fixed and you should be able to access the URLs
@@javadevjournal Okay, thank you. I've got many lessons from your website :)
@@ramabookstroremalang9131 happy that it is helpful to you.
Hey my friend have you tried to create custom Provider with the new SecurityFilterChain since WebSecurityConfigurerAdapter is deprecated?
I've tried so many approaches for 2 days now and I can't even get DAOAuthenticartionProvider to work with SecurityFilterChain using HttpBasic auth. Even when my UserDetailsService is invoked on authentication, it seems it is not setup as the principal
webSecurityConfigurerAdapter now deprecated
Thanks and Agree, I have updated the related post..need to see if I can update the video.
@@javadevjournal
Hello, I'm trying to find a link related to the update you're talking about and I can't find it. Help pls. :)
@@PetraUdovicic that is used instead @WebSecurutyAdapter