Hands-On Spring Security 5 for Reactive Applications

Web URL

Spring Security can be used to set up URL-based authorization. HTTP Security configured can be used with Spring Security configuration to achieve the desired authorization. In many examples that we have gone through so far, we have seen pattern matching authorization. Here is one such example:

• AntPathRequestMatcher: Uses an Ant-style pattern for URL matching:

http    .antMatcher("/rest/**")    .httpBasic()        .disable()    .authorizeRequests()        .antMatchers("/rest/movie/**", "/rest/ticket/**", "/index")            .hasRole("ROLE_USER");

In the preceding code snippet, the /rest URL's basic authentication is disabled, and for other URLs (/rest/movie, /rest/ticket and /index), users with the USER role have access. The snippet also shows single match (using ...