package com.example.demo.controller;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.context.annotation.Configuration;

import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;

import org.springframework.security.config.annotation.web.builders.HttpSecurity;

import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;

import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.security.core.userdetails.UserDetailsService;

import org.springframework.security.core.userdetails.UsernameNotFoundException;

import com.example.demo.dao.ReaderDao;

@Configuration

@EnableWebSecurity

public class SecurityConfig  extends WebSecurityConfigurerAdapter{

@Autowired

private ReaderDao readerDao;

@Override

protected void configure(AuthenticationManagerBuilder auth) throws Exception {

auth.userDetailsService(new UserDetailsService(){

@Override

public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {

return readerDao.findOne(username);

}

});

}

@Override

protected void configure(HttpSecurity http) throws Exception {

http.authorizeRequests().antMatchers("/").access("hasRole('READER')")

.antMatchers("/**").permitAll().and().formLogin().loginPage("/login").failureUrl("/login?error=true");

}

}