update firewall

roundshoulder · Dec 8, 2022 · 0b18c03 · 0b18c03
1 parent 14984cb
commit 0b18c03
Show file tree

Hide file tree

Showing 8 changed files with 13 additions and 0 deletions.
diff --git a/.gradle/7.5.1/executionHistory/executionHistory.lock b/.gradle/7.5.1/executionHistory/executionHistory.lock
diff --git a/.gradle/7.5.1/fileHashes/fileHashes.lock b/.gradle/7.5.1/fileHashes/fileHashes.lock
diff --git a/.gradle/buildOutputCleanup/buildOutputCleanup.lock b/.gradle/buildOutputCleanup/buildOutputCleanup.lock
diff --git a/build/classes/java/main/com/project/csletter/global/config/SecurityConfig.class b/build/classes/java/main/com/project/csletter/global/config/SecurityConfig.class
diff --git a/build/classes/java/main/com/project/csletter/jwt/JwtRequestFilter.class b/build/classes/java/main/com/project/csletter/jwt/JwtRequestFilter.class
diff --git a/build/classes/java/main/com/project/csletter/member/service/MemberService.class b/build/classes/java/main/com/project/csletter/member/service/MemberService.class
diff --git a/build/tmp/compileJava/previous-compilation-data.bin b/build/tmp/compileJava/previous-compilation-data.bin
diff --git a/src/main/java/com/project/csletter/global/config/SecurityConfig.java b/src/main/java/com/project/csletter/global/config/SecurityConfig.java
@@ -9,11 +9,14 @@
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.builders.WebSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.security.web.firewall.DefaultHttpFirewall;
+import org.springframework.security.web.firewall.HttpFirewall;
 import org.springframework.web.filter.CorsFilter;
 
 import javax.servlet.Filter;
@@ -58,6 +61,11 @@ protected void configure(HttpSecurity http) throws Exception {
         http.addFilterBefore(jwtExceptionFilter(), JwtRequestFilter.class);
     }
 
+    @Override
+    public void configure(WebSecurity web) throws Exception {
+        web.httpFirewall(defaultHttpFirewall());
+    }
+
     @Bean
     public JwtExceptionFilter jwtExceptionFilter() {
         JwtExceptionFilter jwtExceptionFilter = new JwtExceptionFilter();
@@ -69,4 +77,9 @@ public JwtRequestFilter jwtRequestFilter() {
         JwtRequestFilter jwtRequestFilter = new JwtRequestFilter(memberRepository, jwtService);
         return jwtRequestFilter;
     }
+
+    @Bean
+    public HttpFirewall defaultHttpFirewall() {
+        return new DefaultHttpFirewall();
+    }
 }