package com.PFE.ServerManager;
  
  import org.springframework.beans.factory.annotation.Autowired;
  import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
  import org.springframework.context.annotation.Configuration;
  import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

  import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  import org.springframework.security.web.util.matcher.AntPathRequestMatcher;

  import javax.sql.DataSource;
  
  @Configuration
  @EnableAutoConfiguration
  public class SecurityConfig extends WebSecurityConfigurerAdapter {
  
      @Autowired
      DataSource dataSource;
  
      @Autowired

      private BCryptPasswordEncoder passwordEncoder;
  
      @Autowired

      public void configAuthentication(AuthenticationManagerBuilder auth) throws Exception {
          auth.jdbcAuthentication()
                  .dataSource(dataSource)

                  .passwordEncoder(passwordEncoder)

                  .usersByUsernameQuery("select email, password , active from customer where email=?")
                  .authoritiesByUsernameQuery("select c.email, r.role from customer c inner join customer_role cr on(c.customer_id=cr.customer_id) inner join role r on(cr.role_id=r.role_id) where c.email=?");

      }
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http
                  .authorizeRequests()

                      .antMatchers("/home").hasAnyAuthority("USER","ADMIN")
                      .antMatchers("/registration").hasAuthority("ADMIN")

                      .antMatchers("/all").hasAuthority("ADMIN")

                      .antMatchers("/login").permitAll()

                      .antMatchers("/denied").permitAll()

                      .antMatchers("/css/**", "/js/**").permitAll()

                      .anyRequest().authenticated()

                      .and()
                  .formLogin()

                      .loginPage("/login").failureUrl("/login?error=true")

                      .defaultSuccessUrl("/home")

                      .usernameParameter("email")

                      .passwordParameter("password")

                      .and()
                  .logout()

                      .logoutRequestMatcher(new AntPathRequestMatcher("/logout"))

                      .logoutSuccessUrl("/login")

                      .and()
                  .exceptionHandling()

                      .accessDeniedPage("/denied")
                      .and()
                  .csrf().disable();

      }

  }