NapoleonDynamite/munera-vaadin
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: SecurityConfiguration roles

Browse source
This commit is contained in:
effe 2024-09-13 14:37:07 -04:00
parent 59fe0b3bb7
commit 7deec14a11
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/main/java/com/application/munera/security/SecurityConfiguration.java
View file

@ -45,9 +45,13 @@ public class SecurityConfiguration extends VaadinWebSecurity {
final var user = userRepository.findByUsername(username) final var user = userRepository.findByUsername(username)
.orElseThrow(() -> new UsernameNotFoundException("User not found")); .orElseThrow(() -> new UsernameNotFoundException("User not found"));
// Assume roles are stored in the database with prefix, ex: "ROLE_ADMIN"
String[] roles = user.getRoles().split(",");
// Use authorities instead of roles to prevent automatic prefixing
return User.withUsername(user.getUsername()) return User.withUsername(user.getUsername())
.password(user.getPassword()) .password(user.getPassword())
.roles(user.getRoles().split(",")) .authorities(roles) // Set roles directly as authorities
.build(); .build();
} }
}; };