| 
					
				 | 
			
			
				@@ -0,0 +1,41 @@ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+package com.yonge.cooleshow.admin.config; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.yonge.cooleshow.common.security.BaseAccessDeniedHandler; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import com.yonge.cooleshow.common.security.BaseAuthenticationEntryPoint; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.beans.factory.annotation.Autowired; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.context.annotation.Configuration; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.security.config.annotation.web.builders.HttpSecurity; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+@Configuration 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+@EnableResourceServer 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+@EnableGlobalMethodSecurity(prePostEnabled = true) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+public class ResourceServerConfig extends ResourceServerConfigurerAdapter { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	@Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	private BaseAccessDeniedHandler baseAccessDeniedHandler; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	@Autowired 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	private BaseAuthenticationEntryPoint baseAuthenticationEntryPoint; 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	@Override 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	public void configure(HttpSecurity http) throws Exception { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+		http.csrf() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.disable() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.exceptionHandling() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.accessDeniedHandler(baseAccessDeniedHandler) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.authenticationEntryPoint(baseAuthenticationEntryPoint) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.and() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.authorizeRequests() 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+				.antMatchers("/v2/api-docs", "/code/*").permitAll().anyRequest().authenticated().and().httpBasic(); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	} 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	@Override 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	public void configure(ResourceServerSecurityConfigurer resources) throws Exception { 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+		resources.authenticationEntryPoint(baseAuthenticationEntryPoint).accessDeniedHandler(baseAccessDeniedHandler); 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+	} 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+ 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+} 
			 |