@Configuration

@RequiredArgsConstructor

@EnableGlobalMethodSecurity(prePostEnabled = true)

public class SecurityConfig extends WebSecurityConfigurerAdapter {

    private final BCryptPasswordEncoder passwordEncoder;

    private final UserDetailsService userService;

    private final AuthenticationManagerBuilder authenticationBuilder;

​

    @Override

    protected void configure(HttpSecurity http) throws Exception {

        http.csrf().disable()

                .formLogin()

                .and()

                .authorizeRequests()

                .antMatchers("/secured/**")

                .authenticated()

                .and()

                .authorizeRequests()

                .and()

                .httpBasic();

    }

​

    @Override

    @Bean

    public AuthenticationManager authenticationManagerBean() throws Exception {

        authenticationBuilder.userDetailsService(userService).passwordEncoder(passwordEncoder);

        return super.authenticationManagerBean();

    }

}