VsCodeでspring security

	<dependencies>
		<dependency>
			<groupId>org.webjars</groupId>
			<artifactId>bootstrap</artifactId>
			<version>5.3.0</version>
		</dependency>
		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-data-jdbc</artifactId>
		</dependency>
		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-thymeleaf</artifactId>
		</dependency>
		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-web</artifactId>
		</dependency>

		<dependency>
			<groupId>com.microsoft.sqlserver</groupId>
			<artifactId>mssql-jdbc</artifactId>
			<version>12.6.1.jre11</version>
		</dependency>
		<dependency>
			<groupId>com.microsoft.sqlserver</groupId>
			<artifactId>mssql-jdbc_auth</artifactId>
			<version>12.6.1.x64</version>
			<type>dll</type>
		</dependency>
		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-security</artifactId>
		</dependency>
		<dependency>
			<groupId>com.h2database</groupId>
			<artifactId>h2</artifactId>
			<scope>runtime</scope>
		</dependency>

		<dependency>
			<groupId>org.springframework.boot</groupId>
			<artifactId>spring-boot-starter-test</artifactId>
			<scope>test</scope>
		</dependency>
	</dependencies>

	spring.application.name=spsqljdbc
	spring.datasource.driver-class-name=com.microsoft.sqlserver.jdbc.SQLServerDriver
	spring.datasource.url=jdbc:sqlserver://localhost\\SQLEXPRESS:1433;databaseName=Mydb;IntegratedSecurity=true;TrustServerCertificate=true;

	CREATE DATABASE MYDB;

	create table users (
	id int primary key identity(1,1) not null,
	username nvarchar(255) not null,
	password nvarchar(255) not null,
	enabled tinyint not null
	);

	create table authorities (
	id int primary key identity(1,1) not null,
	username nvarchar(255) not null,
	authority text not null
	);

	create table users(
		username varchar_ignorecase(50) not null primary key,
		password varchar_ignorecase(500) not null,
		enabled boolean not null
	);
	
	create table authorities (
		username varchar_ignorecase(50) not null,
		authority varchar_ignorecase(50) not null,
		constraint fk_authorities_users foreign key(username) references users(username)
	);
	create unique index ix_auth_username on authorities (username,authority);

	package jp.co.etlab.spsqljdbc;

	import javax.sql.DataSource;
	
	import org.springframework.beans.factory.annotation.Autowired;
	import org.springframework.context.annotation.Bean;
	import org.springframework.context.annotation.Configuration;
	import org.springframework.security.config.annotation.web.builders.HttpSecurity;
	import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
	import org.springframework.security.core.userdetails.User;
	import org.springframework.security.core.userdetails.UserDetails;
	import org.springframework.security.crypto.factory.PasswordEncoderFactories;
	import org.springframework.security.provisioning.JdbcUserDetailsManager;
	import org.springframework.security.provisioning.UserDetailsManager;
	import org.springframework.security.web.SecurityFilterChain;
	
	@Configuration
	@EnableWebSecurity
	public class SampleSecurityConfig {
		@Bean
		public SecurityFilterChain filterChain(HttpSecurity http) throws Exception{
			http.csrf(csrf -> csrf.disable());
			http.authorizeHttpRequests(authorize-> {
				authorize
					.requestMatchers("/").permitAll()
					.requestMatchers("/js/**").permitAll()
					.requestMatchers("/css/**").permitAll()
					.requestMatchers("/webjars/**").permitAll()
					.anyRequest().authenticated();  
			});
			http.formLogin(form->{
				form.defaultSuccessUrl("/secret");
			});
			return http.build();
		}
	
		@Autowired
		private DataSource dataSource;
	
		@Bean
		public UserDetailsManager userDetailsManager() {
			JdbcUserDetailsManager users = new JdbcUserDetailsManager(this.dataSource);
	
			//ユーザー登録
			users.createUser(makeUser("taro","yamada","USER"));
			users.createUser(makeUser("hanako","flower","USER"));
			users.createUser(makeUser("sachiko","happy","USER"));
	
			return users;
		}
	
		private UserDetails makeUser(String user, String pass, String role) {
			return User.withUsername(user)
				.password(
					PasswordEncoderFactories
						.createDelegatingPasswordEncoder()
						.encode(pass))
				.roles(role)
				.build();
		}
	
		// @Bean
		// public InMemoryUserDetailsManager userDetailsManager() {
		//     String username = "user";
		//     String password = "password";
	
		//     UserDetails user = User.withUsername(username)
		//         .password(
		//             PasswordEncoderFactories
		//                 .createDelegatingPasswordEncoder()
		//                 .encode(password))
		//         .roles("USER")
		//         .build();
		//     return new InMemoryUserDetailsManager(user);
		// }
	}
	

	package jp.co.etlab.spsqljdbc;

	import org.springframework.stereotype.Controller;
	import org.springframework.web.bind.annotation.RequestMapping;
	import org.springframework.web.bind.annotation.RequestMethod;
	import org.springframework.web.servlet.ModelAndView;
	
	import jakarta.servlet.http.HttpServletRequest;
	
	@Controller
	public class SampleSecurityController {
		@RequestMapping(value="/", method=RequestMethod.GET)
		public ModelAndView index(ModelAndView mav) {
			mav.setViewName("index");
			mav.addObject("title", "Index page");
			mav.addObject("msg", "This is top page");
			return mav;
		}
	
		@RequestMapping(value="/secret", method=RequestMethod.GET)
		public ModelAndView requestMethodName(ModelAndView mav, HttpServletRequest request) {
			String user = request.getRemoteUser();
			String msg = "This is secret page. [login by \"" + user + "\"]";
			mav.setViewName("Secret");
			mav.addObject("title", "Secret page");
			mav.addObject("msg", msg);
			return mav;
		}
		
	}

	<!DOCTYPE html>
	<html lang="ja" xmlns="http://www.w3.org/1999/xhtml"
					xmlns:th="https://www.thymeleaf.org"
					xmlns:sec="https://www.thymeleaf.org/thymeleaf-extras-springsecurity3">
	<head>
		<meta charset="UTF-8">
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<title th:text="${title}"></title>
		<link th:href="@{/webjars/bootstrap/5.3.0/css/bootstrap.min.css}" rel="stylesheet">
	</head>
	<body>
		<div class="container">
			<main class="py-5 text-center">
				<h1 class="display-4 mb-4" th:text="${title}"></h1>
				<div class="border border-1 p-3">
					<p class="h6" th:text="${msg}"></p>
					<p>Click <a th:href="@{/secret}">here</a> to see a secret page.</p>
				</div>
			</main>
		</div>
		<script th:src="@{/webjars/bootstrap/5.3.0/js/bootstrap.min.js}"></script>    
	</body>
	</html>

	<!DOCTYPE html>
	<html lang="ja" xmlns="http://www.w3.org/1999/xhtml"
					xmlns:th="https://www.thymeleaf.org"
					xmlns:sec="https://www.thymeleaf.org/thymeleaf-extras-springsecurity3">
	<head>
		<meta charset="UTF-8">
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<title th:text="${title}"></title>
		<link th:href="@{/webjars/bootstrap/5.3.0/css/bootstrap.min.css}" rel="stylesheet">
	</head>
	<body>
		<div class="container">
			<main class="py-5 text-center">
				<h1 class="display-4 mb-4" th:text="${title}"></h1>
				<div class="border border-1 p-3">
					<p class="h6" th:text="${msg}"></p>
					<p>Click <a th:href="@{/logout}">here</a>to logout.</p>
				</div>
			</main>
		</div>
		<script th:src="@{/webjars/bootstrap/5.3.0/js/bootstrap.min.js}"></script>    
	</body>
	</html>