[Spring Security] Spring Security6 이상에서 hasIpAddress 사용하는법 (feat. springboot 3.0

WebConfig

@Configuration
@EnableWebSecurity
public class WebSecurity {
    private static final String IP_ADDRESS = "172.0.0.1";
    private static final String SUBNET = "/32";
    private static final IpAddressMatcher IP_ADDRESS_MATCHER = new IpAddressMatcher(IP_ADDRESS + SUBNET);
    private static final String[] WHITE_LIST = {
            "/**",
            "/users/**"
    };

    @Bean
    protected SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http.csrf(csrf -> csrf.disable())
                .headers(headers -> headers
                        .frameOptions(frameOptions -> frameOptions.disable())
                )
                .authorizeHttpRequests(authorize -> authorize
//                        .requestMatchers(AntPathRequestMatcher.antMatcher("/users/**")).permitAll()
                        .requestMatchers(AntPathRequestMatcher.antMatcher("/**")).access(this::hasIpAddress)
                        .requestMatchers(PathRequest.toH2Console()).permitAll()
                );
        return http.build();
    }

    private AuthorizationDecision hasIpAddress(Supplier<Authentication> authentication, RequestAuthorizationContext object) {
        return new AuthorizationDecision(IP_ADDRESS_MATCHER.matches(object.getRequest()));
    }

}

 
 
참고
https://jongmin4943.tistory.com/entry/Spring-Security-6-hasIpAddress-%EC%82%AC%EC%9A%A9%ED%95%98%EB%8A%94%EB%B2%95

Spring Security 6 hasIpAddress 사용하는법 (feat.Spring boot 3)