@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(jsr250Enabled = true, prePostEnabled = true)
public class SecurityConfig {

// настройка пользователей :  создал свой UserAuthenticationProvider

    @Configuration
    @Order(0)
    public static class UserLoginWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {

        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth.authenticationProvider(new UserAuthenticationProvider());
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http
                    .authorizeRequests()
                    .antMatchers("/", "/about", "/resources/**").permitAll()
                    .antMatchers("/login").permitAll()
                    .antMatchers("/message/**").hasRole("SELLER")
                    .antMatchers("/report/**").hasRole("SELLER")
                    .anyRequest().authenticated()
                    .and().rememberMe()
                    .and().formLogin()
                    .permitAll()
                    .defaultSuccessUrl("/", true);

            http
                    .sessionManagement().maximumSessions(1);
            http
                    .logout()
                    .invalidateHttpSession(true)
                    .deleteCookies("JSESSIONID,SPRING_SECURITY_REMEMBER_ME_COOKIE").permitAll()
                    .and()
                    .csrf();
            
                 http
                    .addFilterBefore(new UserAuthorizationFilter(), UsernamePasswordAuthenticationFilter.class);

        }

        @Override
        public void configure(WebSecurity web) throws Exception {
            web
                    .ignoring()
                    .antMatchers("/resources/**", "/favicon.ico"); 
        }

    }

//  

    @Bean
    public static BCryptPasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }
//
    public static class SecurityWebApplicationInitializer extends AbstractSecurityWebApplicationInitializer {

    }
//

    public static class MvcWebApplicationInitializer extends AbstractAnnotationConfigDispatcherServletInitializer {

        @Override
        protected Class<?>[] getRootConfigClasses() {
            return new Class[]{SecurityConfig.class};
        }

        @Override
        protected Class<?>[] getServletConfigClasses() {
            return null;
        }

        @Override
        protected String[] getServletMappings() {
            return new String[]{"/"};

        }

    }

// тут глобальный веб конфиг для всех 
   @Configuration
    @EnableWebMvc
    public static class WebConfig extends WebMvcConfigurerAdapter {

        @Override
        public void addResourceHandlers(ResourceHandlerRegistry registry) {
            registry.addResourceHandler("/favicon.ico").addResourceLocations("/favicon.ico").setCachePeriod(CACHE_PERIOD);
            registry.addResourceHandler("/resources/**").addResourceLocations("/resources/").setCachePeriod(CACHE_PERIOD);
        }

        @Override
        public void addViewControllers(ViewControllerRegistry registry) {
            registry.addViewController("/401").setViewName("500");
            registry.addViewController("/about").setViewName("about");
            registry.addViewController("/admin").setViewName("admin");
            registry.addViewController("/").setViewName("index");
            registry.addViewController("/message/**").setViewName("message");
            registry.setOrder(Ordered.HIGHEST_PRECEDENCE);
        }

        @Bean(name = "jspViewResolver")
        public InternalResourceViewResolver jspViewResolver() {
            InternalResourceViewResolver resolver = new InternalResourceViewResolver();
            resolver.setPrefix("/WEB-INF/jsp/");
            resolver.setSuffix(".jsp");
            resolver.setViewClass(JstlView.class);
            resolver.setOrder(1);
            return resolver;
        }


        @Bean(name = "messageSource")
        public MessageSource messageSource() {
            ReloadableResourceBundleMessageSource messageSource = new ReloadableResourceBundleMessageSource();
            messageSource.setUseCodeAsDefaultMessage(true);
            messageSource.setBasenames("errors", "message");
            messageSource.setCacheSeconds(5);
            messageSource.setFallbackToSystemLocale(false);
            messageSource.setDefaultEncoding("UTF-8");
            return messageSource;
        }

        @Override
        public void configureDefaultServletHandling(DefaultServletHandlerConfigurer configurer) {
            configurer.enable();
        }


    }



}

  @Value("${include.test.users}")
      private boolean includeTestUsers;

@Configuration
@Order(0)
@EnableWebSecurity
public class TerminalWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {

 @Override
    protected void configure(HttpSecurity http) throws Exception {
     http
                .authorizeRequests()
                .antMatchers("/media/**").permitAll()


}


    @Override
    public void configure(WebSecurity web) throws Exception {
        web
                .ignoring()
                .antMatchers("/media/**")
            
    }


}

@Configuration
@EnableWebMvc
public class WebConfig extends WebMvcConfigurerAdapter {

    private static final int CACHE_PERIOD = 31556926;//one year

    @Override
    public void addResourceHandlers(ResourceHandlerRegistry registry) {
        registry.addResourceHandler("/favicon.ico").addResourceLocations("/favicon.ico").setCachePeriod(CACHE_PERIOD);
        registry.addResourceHandler("/media/**/*.{js,html,css}").addResourceLocations("/media/").setCachePeriod(CACHE_PERIOD);
    }

@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    public void configure(WebSecurity web) throws Exception {
        web
                .ignoring()
                .antMatchers("/media/**/*.{js,html,css}")
                .antMatchers("/favicon.ico", "/about")

    }