Search⌘ K
Home
Courses
Building Scalable Applications with Thymeleaf and Spring Boot

Hardcoded Password

Get started with security configuration by defining fixed passwords.

We'll cover the following...

Security configuration

The heart of security configuration always starts from a @Configuration class that extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter. It’s usually placed in the infrastructure.security package and named as WebSecurityConfiguration:

Java
package com.tamingthymeleaf.application.infrastructure.security;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.password.PasswordEncoder;
@Configuration //<.>
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter { //<.>
    private final PasswordEncoder passwordEncoder;
    public WebSecurityConfiguration(PasswordEncoder passwordEncoder) { //<.>
        this.passwordEncoder = passwordEncoder;
    }
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { //<.>
        auth.inMemoryAuthentication() //<.>
            .withUser("user") //<.>
            .password(passwordEncoder.encode("verysecure")) //<.>
            .roles("USER"); //<.>
    }
}
  • Annotate the class with @Configuration so the component scanning will pick it up
...