william-tran

package com.example.lombokdemo;

import javax.annotation.PostConstruct;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.boot.context.properties.EnableConfigurationProperties;
import org.springframework.context.ConfigurableApplicationContext;
import org.springframework.context.annotation.Bean;

william-tran

    <http name="identityZoneSecurity" pattern="/identity-zones/**" create-session="stateless" entry-point-ref="oauthAuthenticationEntryPoint"
        use-expressions="true" authentication-manager-ref="emptyAuthenticationManager" xmlns="http://www.springframework.org/schema/security">
        <intercept-url pattern="/**" access="#oauth2.hasScope('zones.create') and not request.requestURI.contains('/identity-zones/'+@uaaIdentityZone.id)" method="GET"/>
    </http>

william-tran

@RestController
@RequestMapping("/identity-zones")
public class IdentityZoneEndpoints {

    @PreAuthorize("#id != @uaaIdentityZone.id")
    @RequestMapping(value="{id}", method = GET)
    public IdentityZone getIdentityZone(@PathVariable String id) {
        return zoneDao.retrieve(id);
    }