gingeleski / cucumber-spring-security-tests

Cucumber/BDD security tests example for Java (Spring Boot API).
9 stars 8 forks source link

Refactor for better authorization (JWT) #44

Closed gingeleski closed 4 years ago

gingeleski commented 4 years ago

Original project state seemed to shoddily achieve JWT authorization.

I am opening this issue to liberally refactor all the JWT, authorization, and controller stuff.

See inspiration via the following:

Only thing I don't care for in that project is that all authorization stuff is in a config file. Prefer the annotation-based approach, i.e. @PreAuthorize or @PermitAll over each controller function.

gingeleski commented 4 years ago

This is closed out in the issue#44 branch right now.