spring security 에서 form말고 json body를 받는 REST API login 구현하기 (2) - SecurityConfig

 
@RequiredArgsConstructor
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
 
    private final JwtTokenProvider jwtTokenProvider;
 
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
 
        // 1
        JsonUsernamePasswordAuthenticationFilter jsonUsernamePasswordAuthenticationFilter = new JsonUsernamePasswordAuthenticationFilter(
                jwtTokenProvider);
        jsonUsernamePasswordAuthenticationFilter.setAuthenticationManager(authenticationManagerBean());
 
        // 2
        http.httpBasic().disable()
                .authorizeRequests()
                .addFilterBefore(jsonUsernamePasswordAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)
                // 3
                .addFilterBefore(new JwtAuthenticationFilter(jwtTokenProvider), JsonUsernamePasswordAuthenticationFilter.class);
    }
}