Merge pull request #9 from LinuxSuRen/feat/basic-auth

feat: add a basic auth

Author: LinuxSuRen

.gitpod.yml

@@ -1,3 +1,6 @@
+tasks:
+  - init: make init-env
+
 vscode:
   extensions:
     - linuxsuren.api-testing

Makefile

@@ -4,3 +4,11 @@ test-e2e:
 	cd e2e && ./start.sh
 run-demo:
 	cd e2e && docker compose up server
+
+local-test:
+	atest run -p e2e/test-suite.yaml
+
+init-env:
+	curl https://linuxsuren.github.io/tools/install.sh|bash
+	hd i cli/cli
+	hd i atest

e2e/test-suite.yaml

@@ -10,17 +10,23 @@ items:
 - name: toLowerWithoutParam
   request:
     api: /lower
+    header:
+      Authorization: Basic YWRtaW46MTIzNDU2
   expect:
     statusCode: 400
 - name: toLower
   request:
     api: /lower?text=Hello
+    header:
+      Authorization: Basic YWRtaW46MTIzNDU2
   expect:
     body: hello
 
 ## Cookies
 - name: no-cookie
   request:
     api: /cookies/echo
+    header:
+      Authorization: Basic YWRtaW46MTIzNDU2
   expect:
-    body: cookies are empty
+    body: cookies are empty

pom.xml

@@ -23,9 +23,14 @@
 		</dependency>
 
 		<dependency>
-    <groupId>org.springdoc</groupId>
-    <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
-    <version>2.2.0</version>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-security</artifactId>
+		</dependency>
+
+		<dependency>
+			<groupId>org.springdoc</groupId>
+			<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
+			<version>2.2.0</version>
 		</dependency>
 
 		<dependency>

src/main/java/io/github/devopsws/demo/config/WebSecurityConfig.java

@@ -0,0 +1,36 @@
+package io.github.devopsws.demo.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.provisioning.InMemoryUserDetailsManager;
+import org.springframework.security.web.SecurityFilterChain;
+
+@Configuration
+@EnableWebSecurity
+public class WebSecurityConfig {
+
+    @Bean
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+        http.authorizeHttpRequests((requests) -> requests
+                .requestMatchers("/health", "/v3/api-docs").permitAll()
+                .anyRequest().authenticated()).httpBasic();
+
+        return http.build();
+    }
+
+    @Bean
+    public UserDetailsService userDetailsService() {
+        UserDetails user = User.withDefaultPasswordEncoder()
+                .username("admin")
+                .password("123456")
+                .roles("USER")
+                .build();
+
+        return new InMemoryUserDetailsManager(user);
+    }
+}