gistfile1.txt

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter { 
@Override protected void configure(HttpSecurity http) throws Exception {
http.httpBasic().and() 
.authorizeRequests() 
.requestMatchers(EndpointRequest.to("info", "health")).permitAll() 
.requestMatchers(EndpointRequest.toAnyEndpoint()).hasRole("SYSTEM") 
.antMatchers("/**").hasRole("USER"); }

@Override protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.inMemoryAuthentication() 
.passwordEncoder(new  MessageDigestPasswordEncoder("SHA-256")) 
.withUser("user")
.password("5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8") 
.roles("USER") .and() .withUser("sysuser") .password("5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8")
.roles("SYSTEM");
}}