Integrate to Spring Boot with Spring Security about line-bot-sdk-java

[TommyYehCool]

I think that I missed the setting, thanks for your help!

[kazuki-ma]

Thank you for your feedback.
First, could you give me more detail about your propose?

I think you have to hosting "event callback endpoint" and "public resources" in same server
and want to protect your public resources by Spring Security.

Is it right?

[TommyYehCool]

Yea it is right

[kazuki-ma]

OK but sorry I can't reproduce your issue.

Please be careful you should security.ignored: /callback.

Could you give me the code to reproduces?

Below is the code for my test.

My java

package com.example.bot.spring.echo;

import java.security.Principal;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;

import com.linecorp.bot.model.event.Event;
import com.linecorp.bot.model.event.MessageEvent;
import com.linecorp.bot.model.event.message.TextMessageContent;
import com.linecorp.bot.model.message.TextMessage;
import com.linecorp.bot.spring.boot.annotation.EventMapping;
import com.linecorp.bot.spring.boot.annotation.LineMessageHandler;

import lombok.extern.slf4j.Slf4j;

@SpringBootApplication
@LineMessageHandler
@RestController
@Slf4j
public class EchoApplication extends WebSecurityConfigurerAdapter {
    public static void main(String[] args) {
        SpringApplication.run(EchoApplication.class, args);
    }

    @GetMapping("/")
    public Object whoami(final Principal principal)  {
        return principal;
    }

    @EventMapping
    public TextMessage handleTextMessageEvent(
            final MessageEvent<TextMessageContent> event) {
        return new TextMessage(event.getMessage().getText());
    }

    @EventMapping
    public void handleDefaultMessageEvent(final Event event) {
        log.info("Event: {}", event);
    }
}

application.yml

line.bot:
  channel-secret: MY SECRET
  channel-token: MY TOKEN

security:
  ignored: /callback

[kazuki-ma]

You are welcome~