Spring Boot web service designed for a specific domain -
i'd have restriction on spring boot security allowing particular domain (or hostname) make web service calls.
the idea allow 1 single app (based on spring mvc) access these webservices in spring boot application.
update
i tried incorporate hasipaddress shown below has no effect
@override protected void configure(httpsecurity http) throws exception { http.authorizerequests().anyrequest().permitall().and().authorizerequests().anyrequest().access("hasipaddress('localhost')"); }
is there such setting in spring security ? or need use interceptor ?
in spring web security there hasipaddress expression in can pass in ip or range.
sample config:
<http use-expressions="true"> <intercept-url pattern="/myurlpattern/*" access="hasipaddress('100.10.11.12')" /> </http>
more explanation here.
Comments
Post a Comment