multiple http elems config, controller, pages, test (#1307)

* multiple http elems config, controller, pages, test

* fix dependencies

* formatting

* formatting

* update security-test versiob

spring-security-mvc-boot/src/main/java/org/baeldung/Application.java

@@ -9,7 +9,8 @@ import org.springframework.context.annotation.FilterType;
 
 @Configuration
 @EnableAutoConfiguration
-@ComponentScan(excludeFilters = { @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.voter.*"), @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.multiplelogin.*") })
+@ComponentScan(excludeFilters = { @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.voter.*"), @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.multiplelogin.*"),
+        @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.baeldung.multipleentrypoints.*") })
 public class Application extends SpringBootServletInitializer {
     public static void main(String[] args) {
         SpringApplication.run(Application.class, args);

spring-security-mvc-boot/src/main/java/org/baeldung/multipleentrypoints/MultipleEntryPointsApplication.java

@@ -0,0 +1,12 @@
+package org.baeldung.multipleentrypoints;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+// @ImportResource({"classpath*:spring-security-multiple-entry.xml"})
+public class MultipleEntryPointsApplication {
+    public static void main(String[] args) {
+        SpringApplication.run(MultipleEntryPointsApplication.class, args);
+    }
+}

spring-security-mvc-boot/src/main/java/org/baeldung/multipleentrypoints/MultipleEntryPointsSecurityConfig.java

@@ -0,0 +1,79 @@
+package org.baeldung.multipleentrypoints;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.annotation.Order;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.provisioning.InMemoryUserDetailsManager;
+
+@Configuration
+@EnableWebSecurity
+public class MultipleEntryPointsSecurityConfig {
+
+    @Bean
+    public UserDetailsService userDetailsService() throws Exception {
+        InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
+        manager.createUser(User.withUsername("user").password("userPass").roles("USER").build());
+        manager.createUser(User.withUsername("admin").password("adminPass").roles("ADMIN").build());
+        return manager;
+    }
+
+    @Configuration
+    @Order(1)
+    public static class App1ConfigurationAdapter extends WebSecurityConfigurerAdapter {
+
+        public App1ConfigurationAdapter() {
+            super();
+        }
+
+        @Override
+        protected void configure(HttpSecurity http) throws Exception {
+            //@formatter:off
+            http.antMatcher("/admin/**")
+                .authorizeRequests().anyRequest().hasRole("ADMIN")
+                .and().httpBasic()
+                .and().exceptionHandling().accessDeniedPage("/403");
+            //@formatter:on
+        }
+    }
+
+    @Configuration
+    @Order(2)
+    public static class App2ConfigurationAdapter extends WebSecurityConfigurerAdapter {
+
+        public App2ConfigurationAdapter() {
+            super();
+        }
+
+        protected void configure(HttpSecurity http) throws Exception {
+            //@formatter:off
+            http.antMatcher("/user/**")
+                .authorizeRequests().anyRequest().hasRole("USER")              
+                .and().formLogin().loginPage("/userLogin").loginProcessingUrl("/user/login")
+                .failureUrl("/userLogin?error=loginError").defaultSuccessUrl("/user/myUserPage")
+                .and().logout().logoutUrl("/user/logout").logoutSuccessUrl("/multipleHttpLinks")
+                .deleteCookies("JSESSIONID")
+                .and().exceptionHandling().accessDeniedPage("/403")
+                .and().csrf().disable();
+            //@formatter:on
+        }
+    }
+
+    @Configuration
+    @Order(3)
+    public static class App3ConfigurationAdapter extends WebSecurityConfigurerAdapter {
+
+        public App3ConfigurationAdapter() {
+            super();
+        }
+
+        protected void configure(HttpSecurity http) throws Exception {
+            http.antMatcher("/guest/**").authorizeRequests().anyRequest().permitAll();
+        }
+    }
+
+}

spring-security-mvc-boot/src/main/java/org/baeldung/multipleentrypoints/PagesController.java

@@ -0,0 +1,38 @@
+package org.baeldung.multipleentrypoints;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+@Controller
+public class PagesController {
+
+    @RequestMapping("/multipleHttpLinks")
+    public String getMultipleHttpLinksPage() {
+        return "multipleHttpElems/multipleHttpLinks";
+    }
+
+    @RequestMapping("/admin/myAdminPage")
+    public String getAdminPage() {
+        return "multipleHttpElems/myAdminPage";
+    }
+
+    @RequestMapping("/user/myUserPage")
+    public String getUserPage() {
+        return "multipleHttpElems/myUserPage";
+    }
+
+    @RequestMapping("/guest/myGuestPage")
+    public String getGuestPage() {
+        return "multipleHttpElems/myGuestPage";
+    }
+
+    @RequestMapping("/userLogin")
+    public String getUserLoginPage() {
+        return "multipleHttpElems/login";
+    }
+
+    @RequestMapping("/403")
+    public String getAccessDeniedPage() {
+        return "403";
+    }
+}