An example of SecurityConfiguration for an application based on Spring framework

SecurityConfiguration.java

@Configuration
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    private static final String readScope = "#oauth2.isOAuth() && #oauth2.hasScope('read')";

    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }
    
    @Override
    public void configure(final HttpSecurity http) throws Exception {
        http.anonymous().disable();
        http.httpBasic().disable();
        http.logout().disable();
        http.loginForm().disable();
        http.headers().httpStrictTransportSecurity();
        http.authorizeRequests()
            .antMatchers("/**").access(read)
            .anyRequest().authenticated();
    }
}