스프링 시큐리티 (jwt 적용 전) api 테스트 중 포스트맨 403 해결법 알고 싶습니다...

Question

package com.controller; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.ResponseBody; import org.springframework.web.bind.annotation.RestController; &#64;RestController &#64;ResponseBody public class TestController { &#64;GetMapping({&#34;/&#34;, &#34;&#34;}) public static String mainP() { return &#34;main Controller&#34;; } }컨트롤러구요,package com.config; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.http.HttpMethod; import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; import org.springframework.security.config.http.SessionCreationPolicy; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.web.SecurityFilterChain; &#64;Configuration //&#64;EnableMethodSecurity &#64;EnableWebSecurity //시큐리티가 스프링 필터 체인에 걸림 public class SecurityConfig { &#64;Bean public BCryptPasswordEncoder bCryptPasswordEncoder() { return new BCryptPasswordEncoder(); } &#64;Bean public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { http.csrf((auth) -> auth.disable()); http.formLogin((auth) -> auth.disable()); http.httpBasic((auth) -> auth.disable()); http.authorizeHttpRequests((auth) -> auth .requestMatchers(&#34;/login&#34;, &#34;/&#34;).permitAll() .requestMatchers(HttpMethod.POST, &#34;/join&#34;).permitAll() .anyRequest().authenticated() ); http .sessionManagement((session) -> session .sessionCreationPolicy(SessionCreationPolicy.STATELESS)); return http.build(); } }config 파일입니다. 스프링 부트 버전은 가장 최신 버전이고, 시큐리티도 최신버전입니다...이것도 403이 나고이것도 403이 나는데 해결법 알려주시면 감사하겠습니다...2024-01-16T23:42:34.188&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy : Securing POST /join2024-01-16T23:42:34.191&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.s.w.a.AnonymousAuthenticationFilter : Set SecurityContextHolder to anonymous SecurityContext2024-01-16T23:42:34.196&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy : Secured POST /join2024-01-16T23:42:34.240&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy : Securing POST /error2024-01-16T23:42:34.240&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.s.w.a.AnonymousAuthenticationFilter : Set SecurityContextHolder to anonymous SecurityContext2024-01-16T23:42:34.240&#43;09:00 DEBUG 4864 --- [nio-8080-exec-3] o.s.s.w.a.Http403ForbiddenEntryPoint : Pre-authenticated entry point called. Rejecting access이거저거 다 설정해봐도 같은 메시지만 보여줍니다... 부탁드리겠습니다! 힌트라도 주시면 감사하겠습니다...!

하루의_spring · Answer

requestMatcher -> antMatcher 로 쓰세요

스프링 시큐리티 (jwt 적용 전) api 테스트 중 포스트맨 403 해결법 알고 싶습니다...

1개의 답변

기술 목록