Spring Security - Third Edition

Registering a custom SecurityMetadataSource

Now, all that is left is for us to configure FilterInvocationServiceSecurityMetadataSource. The only problem is that Spring Security does not support configuring a custom FilterInvocationServiceSecurityMetadataSource interface directly. This is not too difficult, so we will register this SecurityMetadataSource with our FilterSecurityInterceptor in our SecurityConfig file:

    // src/main/java/com/packtpub/springsecurity/configuration/    SecurityConfig.java   @Override    public void configure(final WebSecurity web) throws Exception {       ...       final HttpSecurity http = getHttp();       web.postBuildAction(() -> {       FilterSecurityInterceptor fsi = http.getSharedObject       (FilterSecurityInterceptor.class); fsi.setSecurityMetadataSource(metadataSource); ...