feature/18-securityconfig #21

Merged

abby merged 51 commits from feature/18-securityconfig into develop 2026-06-03 01:41:48 +00:00

Conversation 0 Commits 51 Files changed 30 +560 -62

abby commented 2026-06-03 01:41:23 +00:00

Owner

Copy link

• Implemented very basic SecurityConfig to allow public access to /api/menu endpoint.
• Began work on jwt/user/auth modules, will be finished on another branch.
• Opening PR to have at least basic menu viewing with page/filter/sort available in staging and production live environments.

- Implemented very basic SecurityConfig to allow public access to /api/menu endpoint. - Began work on jwt/user/auth modules, will be finished on another branch. - Opening PR to have at least basic menu viewing with page/filter/sort available in staging and production live environments.

abby added this to the Menu details, filtering & sorting milestone 2026-06-03 01:41:23 +00:00

abby added 51 commits 2026-06-03 01:41:23 +00:00

Merge pull request 'Pulling in CI/CD workflow from develop into staging' (#17) from develop into staging ... 999c05b17e

Reviewed-on: #17

Add ssh step to production workflow b0e4e2c523

Create separate dev and prod/staging CorsConfig files 92b34b1a30

Add SecurityConfig, update SecurityConfigDev, removed DEBUG logging from production application.yaml 4f1b9742a7

Add SecurityConfig, update SecurityConfigDev, removed DEBUG logging from production application.yaml 242ae33952

Updated API base in backend and on VPS to resolve letsencrypt errors. c9b65695a4

Changed Spring Security logging to DEBUG 43678e1405

added 'sha-' to front of to ensure it remains a string (and doesn't get converted to a float/scientific notation because of an 'e14' in the hash 61fe02468b

Temporarily disabled formLogin and httpBasic authentication. Will re-enable once auth module is implemented (Just need to ensure the frontend can comsume the basic API for now) 31f3d850da

Disable Spring Security auto-generation of in-memory user 47b98e6528

Found correct syntax to specify multiple profiles on SO: https://stackoverflow.com/questions/38133808/spring-multiple-profiles-active and https://docs.spring.io/spring-framework/reference/core/beans/environment.html 6842f8aa93

Changed allowed public endpoints to * dbf54aeb21

Reverted to very basic SecurityConfig.java a2e7c9d44e

Reverting Spring Security for public endpoint 2e96c218be

Updated README 9ed5b51ee9

Temporarily disabled formLogin and httpBasic authentication. Will re-enable once auth module is implemented (Just need to ensure the frontend can comsume the basic API for now) 2ba0c2213d

Add exclude in main app class 7820c1c8f2

Applied dev SecurityConfig to all for now until Auth is implemented. ca1e98f45e

Applied dev SecurityConfig to all for now until Auth is implemented. 926b31dabf

Create SecurityConfigStaging.dev. Added rule to ensure HttpStatus.OPTIONS is matched first. c6603ec6a7

Update application-staging.yml (Fixed a typo) 47be881ef8

Add more debug logging to SecurityConfigStaging. d1619fc150

Remove excludes from AbcApplication dc158300d1

Fixed some formatting in SecurityConfig 88465273da

Added auth and securityconfig from previous ABC implementation and updated woodpecker to build from this branch to test 05780202a3

Added auth and securityconfig from previous ABC implementation and updated woodpecker to build from this branch to test a607f74248

Add excludes in application-staging.yml 1771556b47

Renamed CustomUserDetailsService, added authorities granting. aa0886c494

Explicitly disabled formLogin and httpBasic in securityConfig. 774312bbbb

Added explicit call to CustomSecurityUserDetailsService in SecurityConfigStaging. 65a55e7bed

Removed explicit call to @EnableWebSecurity 0ae287d54f

Removed excludes from main application class. ff3466c09d

Changed userDetailsService to return a new instance rather than requiring a parameter. 952e6d5650

Noticed dev environment used my customUserDetailsService when adding the AuthenticationManager. Updating SecurityConfigStaging to be similar to Dev (Still trying to get public endpoint accessible without login) 8beff800af

Noticed dev environment used my customUserDetailsService when adding the AuthenticationManager. Updating SecurityConfigStaging to be similar to Dev (Still trying to get public endpoint accessible without login) 88fac18cf7

added exclude to main class 39ad23db14

added exclude to main class fa2e5dd1d2

Removed profile designation from SecurityConfig. cc8ff6f092

Removed profile designation from SecurityConfig. 74f9e92ddb

Removed profile designation from SecurityConfig. 5c5b57793e

Found the (super embarrasing) user error in all the testing on this branch (docker-config file on the server did not reflect change to image naming scheme, was not running any of my changed code since around 3 days ago) 6a121af821

Add /actuator/** to public endpoints in SecurityConfig 21d50af62e

Update /api/menu to /api/menu/** in SecurityConfig to allow filter/sort/paging params. 126f351890

Update /api/menu to /api/menu/** in SecurityConfig to allow filter/sort/paging params. 6c5cf1599d

Path prefix change was missing from MenuItemController 164a3cf36c

Update menu model to use PagedModel 60d158b88f

added /api back to menu-api.ts bb1c29737f

Removed unnecessary methods in MenuItemRepository c9080356d5

Removed test profile 7a698ae072

Added explicit call to set Spring Profile envvar in woodpeckerci workflow 90efa63ebf

Removed feature/18 branch from woodpecker-ci in preparation for PR afa0871ddd

abby added this to the Artisanal Boulangerie de Char project 2026-06-03 01:41:23 +00:00

abby merged commit 647e104b8b into develop 2026-06-03 01:41:48 +00:00

abby referenced this pull request from a commit 2026-06-03 01:41:50 +00:00

Merge pull request 'feature/18-securityconfig' (#21) from feature/18-securityconfig into develop

abby deleted branch feature/18-securityconfig 2026-06-03 01:41:58 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Menu details, filtering & sorting

Projects

Clear projects

No items

No project

Artisanal Boulangerie de Char

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

abby/artisanal-boulangerie-de-char!21

No description provided.