Refactory by the functions Bearer JWT

Author: FabioFS

src/main/java/com/sippulse/pet/system/config/SecurityConfig.java

@@ -12,7 +12,8 @@
 import org.springframework.security.config.http.SessionCreationPolicy;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 
-import com.sippulse.pet.security.Roles;
+import com.sippulse.pet.security.PermissionEnum;
+import com.sippulse.pet.security.RoleEnum;
 import com.sippulse.pet.security.jwt.JwtConfigurer;
 import com.sippulse.pet.security.jwt.JwtTokenProvider;
 
@@ -52,10 +53,15 @@ protected void configure(HttpSecurity http) throws Exception {
 				//public endpoints
 				.antMatchers("/auth/signin").permitAll()
 				.antMatchers("/swagger-ui.html**").permitAll()
-				.antMatchers(Roles.ROLE_FIND_VISIT_BY_OWNER.getUrl()).permitAll()
+				.antMatchers(RoleEnum.ROLE_FIND_VISIT_BY_OWNER.getUrl()).permitAll()
 
 				//private endpoints
-			//	.antMatchers(Roles.ROLE_OWNER_CRUD.getUrl()).hasRole(Roles.ROLE_OWNER_CRUD.getDescription())
+				.antMatchers(RoleEnum.ROLE_OWNER_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission())
+				.antMatchers(RoleEnum.ROLE_PET_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission())
+				.antMatchers(RoleEnum.ROLE_PET_TYPE_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission())
+				.antMatchers(RoleEnum.ROLE_USER_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission())
+				.antMatchers(RoleEnum.ROLE_VISIT_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission(),PermissionEnum.VET.getPermission())
+				.antMatchers(RoleEnum.ROLE_VET_CRUD.getUrl()).hasAnyAuthority(PermissionEnum.EMPLOYEE.getPermission(),PermissionEnum.VET.getPermission())
 				.anyRequest().permitAll()
 			.and()
 			.apply(new JwtConfigurer(tokenProvider));

src/main/java/com/sippulse/pet/system/config/SwaggerConfig.java

@@ -4,15 +4,22 @@
 package com.sippulse.pet.system.config;
 
 import java.util.Collections;
+import java.util.List;
 
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 
+import com.google.common.collect.Lists;
+
 import springfox.documentation.builders.PathSelectors;
 import springfox.documentation.builders.RequestHandlerSelectors;
 import springfox.documentation.service.ApiInfo;
+import springfox.documentation.service.ApiKey;
+import springfox.documentation.service.AuthorizationScope;
 import springfox.documentation.service.Contact;
+import springfox.documentation.service.SecurityReference;
 import springfox.documentation.spi.DocumentationType;
+import springfox.documentation.spi.service.contexts.SecurityContext;
 import springfox.documentation.spring.web.plugins.Docket;
 import springfox.documentation.swagger2.annotations.EnableSwagger2;
 
@@ -24,6 +31,9 @@
 @Configuration
 @EnableSwagger2
 public class SwaggerConfig {
+	
+	 public static final String AUTHORIZATION_HEADER = "Authorization";
+	 public static final String DEFAULT_INCLUDE_PATTERN = "/api/.*";
 
 	@Bean
 	public Docket api() {
@@ -32,7 +42,9 @@ public Docket api() {
 				.apis(RequestHandlerSelectors.basePackage("com.sippulse.pet"))
 				.paths(PathSelectors.any())
 				.build()
-				.apiInfo(apiInfo());
+				.apiInfo(apiInfo())
+	            .securityContexts(Lists.newArrayList(securityContext()))
+	            .securitySchemes(Lists.newArrayList(apiKey()));
 	}
 
 	private ApiInfo apiInfo() {
@@ -41,8 +53,28 @@ private ApiInfo apiInfo() {
 				"Pet-Schedule - Interview SIPPULSE",
 				"v1",
 				"Terms Of Service Url",
-				new Contact("Fabio Figueiredo da Silva", "pet-schedule.xyz", "[email protected]"),
+				new Contact("Fabio Figueiredo da Silva", "https://pet-schedule-br.herokuapp.com/swagger", "[email protected]"),
 				"License of API", "License of URL", Collections.emptyList());
 	}
+	
+	private ApiKey apiKey() {
+        return new ApiKey("JWT - Antes de inserir o token colocar a palavra \"Baerer\" seguida de um espaço e pronto.", AUTHORIZATION_HEADER, "header");
+    }
+
+    private SecurityContext securityContext() {
+        return SecurityContext.builder()
+            .securityReferences(defaultAuth())
+            .forPaths(PathSelectors.regex(DEFAULT_INCLUDE_PATTERN))
+            .build();
+    }
+
+    List<SecurityReference> defaultAuth() {
+        AuthorizationScope authorizationScope
+            = new AuthorizationScope("global", "accessEverything");
+        AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
+        authorizationScopes[0] = authorizationScope;
+        return Lists.newArrayList(
+            new SecurityReference("JWT", authorizationScopes));
+    }
 
 }