package com.ctrip.framework.apollo.common.auth;

 import org.springframework.beans.factory.annotation.Autowired;

 import org.springframework.context.annotation.Configuration;

 import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;

 import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;

 import org.springframework.security.config.annotation.web.builders.HttpSecurity;

 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;

 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

 @Configuration

 @EnableWebSecurity

 @EnableGlobalMethodSecurity(prePostEnabled = true)

 public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

   @Override

   protected void configure(HttpSecurity http) throws Exception {

     http.httpBasic();

     http.csrf().disable();

     http.headers().frameOptions().sameOrigin();

   }

   @Autowired

   public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {

     auth.inMemoryAuthentication().withUser("user").password("").roles("USER").and()

         .withUser("apollo").password("").roles("USER", "ADMIN");

   }

 }