[Spring] Spring Security Servlet 구현 (작성중)

• Spring Security 5.7.1 (Spring Boot 2.7.0)

---

SecurityConfig.java

@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(securedEnabled = true, prePostEnabled = true, jsr250Enabled = true)
public class SecurityConfig {

    @Bean
    public SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
        return httpSecurity.build();
    }
}

@EnableWebSecurity

• Security 설정을 담당하는 클래스를 지정

@EnableGlobalMethodSecurity

• 메소드 단위의 시큐리티 설정을 활성화
• securedEnabled = true: @Secured 활성화
• prePostEnabled = true: @PreAuthorize, @PostAuthorize 활성화
• jsr250Enabled = true: @RolesAllowed 활성화

SecurityFilterChain

• Spring Security 5.7.1 이전에는 WebSecurityConfigurerAdapter 를 상속받고, configure 메소드를 재정의하는 방식으로 설정했으나, deprecated 되었음
  • 참고 : https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter
• SecurityFilterChain Bean을 정의해 설정을 구현