This sample project shows how to use role base security in a Spring Boot application.

To run with support for hot swap during development, use the dev profile as follows:

  mvn spring-boot:run -Dspring-boot.run.profiles=dev

User/Pasword (as defined in resources/data.sql)

  admin: abc123
  user1: abc123

How is role based security enabled?

1. entity/User.java has been updated to return a list of SimpleGrantAuthority objects in the getAuthorities() method.

2. config/SecurityConfig.java has been updated to enable web security and method security.

3. Controllers and services can be annotated with @PreAuthorize(). Example: ContractController.java

4. In Thymeleaf templates, sec:authorize() works with role names. Example: layout/main.html