技术支持项目

package com.apusic.config;

import com.apusic.aas.util.descriptor.web.SecurityCollection;

import com.apusic.aas.util.descriptor.web.SecurityConstraint;

import com.apusic.ams.startup.Apusic;

import com.apusic.boot.web.embedded.ams.AasServletWebServerFactory;

import org.springframework.boot.autoconfigure.condition.ConditionalOnClass;

import org.springframework.boot.web.servlet.server.ConfigurableServletWebServerFactory;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

@Configuration

@ConditionalOnClass(Apusic.class)

public class AasConfig {

    @Bean

    public ConfigurableServletWebServerFactory configurableServletWebServerFactory() {

        AasServletWebServerFactory factory = new AasServletWebServerFactory();

        factory.addContextCustomizers(context -> {

            SecurityConstraint securityConstraint = new SecurityConstraint();

            securityConstraint.setUserConstraint("CONFIDENTIAL");

            SecurityCollection collection = new SecurityCollection();

            collection.addPattern("/*");

            //禁用不安全的方法，按需使用

//            collection.addMethod("HEAD");

//            collection.addMethod("PUT");

//            collection.addMethod("DELETE");

            collection.addMethod("OPTIONS");

            collection.addMethod("TRACE");

//            collection.addMethod("COPY");

//            collection.addMethod("SEARCH");

//            collection.addMethod("PROPFIND");

            securityConstraint.addCollection(collection);

            context.addConstraint(securityConstraint);

        });

        return factory;

    }

}