Auth users definitions

AdrianoSaadeh · AdrianoSaadeh · commit 224ddadea2fd · 2020-10-24T18:40:39.000-03:00
diff --git a/pom.xml b/pom.xml
@@ -77,11 +77,13 @@
 				</exclusion>
 			</exclusions>
 		</dependency>
-        <dependency>
-            <groupId>javax.validation</groupId>
-            <artifactId>validation-api</artifactId>
-            <version>1.1.0.Final</version>
-        </dependency>
+		<!-- https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-validation -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-validation</artifactId>
+<!--			<version>2.3.0</version>-->
+		</dependency>
+
 		<dependency>
 			<groupId>org.glassfish</groupId>
 			<artifactId>javax.el</artifactId>
diff --git a/src/main/java/com/example/apiRest/controller/FilmsController.java b/src/main/java/com/example/apiRest/controller/FilmsController.java
@@ -3,7 +3,6 @@
 import com.example.apiRest.dto.DetailsFilmsDTOResponse;
 import com.example.apiRest.dto.FilmsDTO;
 import com.example.apiRest.dto.FilmsDTOResponse;
-import com.example.apiRest.model.Films;
 import com.example.apiRest.response.Response;
 import com.example.apiRest.service.FilmsService;
 import io.swagger.annotations.Api;
diff --git a/src/main/java/com/example/apiRest/dto/FilmsDTO.java b/src/main/java/com/example/apiRest/dto/FilmsDTO.java
@@ -5,11 +5,7 @@
 import org.hibernate.validator.constraints.Length;
 import org.hibernate.validator.constraints.NotBlank;
 import org.hibernate.validator.constraints.Range;
-
 import javax.persistence.Column;
-import javax.persistence.GeneratedValue;
-import javax.persistence.GenerationType;
-import javax.persistence.Id;
 import javax.validation.constraints.NotNull;
 import java.io.Serializable;
 
diff --git a/src/main/java/com/example/apiRest/security/SecurityConfiguration.java b/src/main/java/com/example/apiRest/security/SecurityConfiguration.java
@@ -44,13 +44,18 @@ protected void configure(AuthenticationManagerBuilder auth) throws Exception {
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
+        .antMatchers("/h2-console/**").permitAll()
         .antMatchers(HttpMethod.GET, "/api/v1/films").permitAll()
         .antMatchers(HttpMethod.GET, "/api/v1/films/*").permitAll()
         .antMatchers(HttpMethod.GET, "/actuator/**").permitAll()
         .antMatchers(HttpMethod.POST, "/auth").permitAll()
+        .antMatchers(HttpMethod.POST, "/api/v1/films").hasRole("ADMIN")
+        .antMatchers(HttpMethod.DELETE, "/api/v1/films/*").hasRole("ADMIN")
+        .antMatchers(HttpMethod.PUT, "/api/v1/films").hasRole("ADMIN")
         .anyRequest().authenticated()
         .and().csrf().disable()
         .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
+        .and().headers().frameOptions().sameOrigin()
         .and().addFilterBefore(new AuthenticationViaTokenFilter(tokenService, userRepository), UsernamePasswordAuthenticationFilter.class);
     }
 
diff --git a/src/main/resources/data.sql b/src/main/resources/data.sql
@@ -4,4 +4,13 @@ INSERT INTO TB_FILMS(name, genre, release_year) VALUES('enter the dragon', 'adve
 INSERT INTO TB_FILMS(name, genre, release_year) VALUES('enter the dragon 2', 'adventure', 1974);
 INSERT INTO TB_FILMS(name, genre, release_year) VALUES('enter the dragon 3', 'adventure', 1977);
 
-INSERT INTO USER(name, email, password) VALUES('Admin', 'admin@films.com', '$2a$10$XAzYDwFxPJNAshMotBsHU.tyAYICXeGZWfqkG6hu.pSc7RlLVQA1S');
+INSERT INTO USER(name, email, password) VALUES('admin', 'admin@films.com', '$2a$10$XAzYDwFxPJNAshMotBsHU.tyAYICXeGZWfqkG6hu.pSc7RlLVQA1S');
+INSERT INTO USER(name, email, password) VALUES('user', 'user@films.com', '$2a$10$XAzYDwFxPJNAshMotBsHU.tyAYICXeGZWfqkG6hu.pSc7RlLVQA1S');
+
+INSERT INTO PROFILE(id, name) VALUES(1, 'ROLE_ADMIN');
+INSERT INTO PROFILE(id, name) VALUES(2, 'ROLE_USER');
+
+INSERT INTO USER_PROFILES(user_id, profiles_id) VALUES(1, 1);
+INSERT INTO USER_PROFILES(user_id, profiles_id) VALUES(2, 2);
+
+
