如何在我们使用 springboot 的 Rest API 应用程序中将域或 IP 地址列入白名单？

Question

I'm implementing REST API and we are directly streaming the response using StreamingResponseBody of springboot. We are receiving query parameter through JSON and we are sending the database response by directly streaming.

We want to lock down access to the URL to a particular Domain or set of IP address - how can we achieve this?

Answer 1

If you are using Java Configuration for Spring Boot Security than you have to use

hasIpAddress()

in SecurityConfig class that extends WebSecurityConfigurerAdapter.

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
           .antMatchers("/login").permitAll()
           .antMatchers("/api/example/**").hasIpAddress("1.1.1.1")
           .anyRequest().authenticated()
           .and()
           .formLogin().permitAll()
           .and()
           .csrf().disable();
    }

    // Rest of Code ...

 }