Time to time I forgot messages from git conflicts, so time to time i have to research and get into the same page..

https://help.github.com/articles/resolving-a-merge-conflict-using-the-command-line/

I enabled spring security 5 and my swagger stuff is blocked, so researching i found this and now it works :)

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@Configuration
class SecurityConfig extends WebSecurityConfigurerAdapter {

    private static final String[] AUTH_WHITELIST = {

            // -- swagger ui
            "/swagger-resources/**",
            "/swagger-ui.html",
            "/v2/api-docs",
            "/webjars/**"
    };
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers(AUTH_WHITELIST).permitAll()
                .antMatchers("/**/*").denyAll();
    }
}

https://github.com/springfox/springfox/issues/1996

I'm working defining some endpoints for a Monolithic Redesign and we're in the process of defining the endpoints, when we add security we wanted an easy way to implement security and that's why we use jersey for the feature of namebinding (read some posts i've done before).

Thing is, we don't want to use jersey, we want to be cool :) and use spring boot based stuff, so we decided to migrate from Jersey to Spring MVC (which is what spring boot is 'compatible' with) but we faced the issue of authentication/authorization, so we decide to use spring security, below are the links and a github POC i've done for this.

This link is from an interesting article some guy named Patrick Lenza wrote, this post is kind of old, but gave me an idea of how spring security works.

Exploring Spring-Boot and Spring-Security: Custom token based authentication of REST services with Spring-Security and pinch of Spring Java Configuration and Spring Integration Testing

This link is from a projec that I followed and i implemented to understand how spring security works from a basic project, by some guy named Alvaro Javier Morgan

Securizar un API REST utilizando JSON Web Tokens

And this is the link of github project that i created...

https://bitbucket.org/richcoto/spring_security_poc/src/master/

Many Spring Boot developers like their apps to use auto-configuration, component scan and be able to define extra configuration on their "application class". A single @SpringBootApplication annotation can be used to enable those three features, that is:

I'm in the middle of a project in which we're trying to implement authentication, how we want to achieve it is by an annotation (@Authenticated) to mark the endpoints that require authentication, the way we know is through Container Request Filter option available in Jersey framework.

It's pretty simple to achieve, below is the guide to achieve it.

https://dzone.com/articles/technique-to-shield-your-api-with-namebinding-1