import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    private static final String MANAGER = "MANAGER";
    private static final String EMPLOYEE = "EMPLOYEE";
    private static final String CUSTOMER = "CUSTOMER";


    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .csrf().disable()
                .authorizeRequests()
                .antMatchers("/").permitAll()
                .antMatchers(HttpMethod.GET, "/employees").hasAnyRole(MANAGER, EMPLOYEE)
                .antMatchers(HttpMethod.POST, "/employees").hasRole(MANAGER)
                .antMatchers("/salary").hasRole(MANAGER)
                .antMatchers("/salary/my").hasAnyRole(MANAGER, EMPLOYEE)
                .antMatchers("/catalog").permitAll()
                .anyRequest()
                .authenticated()
                .and()
                .httpBasic();
    }


    @Bean
    @Override
    protected UserDetailsService userDetailsService(){
        return new InMemoryUserDetailsManager(
                User.builder()
                        .username("MANAGER")
                        .password("123")
                        .roles(MANAGER)
                        .build(),
                User.builder()
                        .username("EMPLOYEE")
                        .password("1234")
                        .roles(EMPLOYEE)
                        .build(),
                User.builder()
                        .username("CUSTOMER")
                        .password("12345")
                        .roles(CUSTOMER)
                        .build()
        );
    }

}