Spring Security 6 Custom Login, OAuth2 Login with Google and Basic Auth

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.Customizer;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

@Bean
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {

return http
.authorizeRequests( authorizeConfig -> {
authorizeConfig.requestMatchers(«/»).permitAll();
authorizeConfig.requestMatchers(«/login/**»).permitAll();
authorizeConfig.requestMatchers(«/error»).permitAll();
authorizeConfig.requestMatchers(«/favicon.ico»).permitAll();
authorizeConfig.anyRequest().authenticated();
})
.formLogin( login -> {
login.loginPage(«/login»).permitAll();
login.defaultSuccessUrl(«/private»);
login.failureUrl(«/login?error=true»).permitAll();
}) //Normal Login
.logout(logout -> {
logout.logoutSuccessUrl(«/login?logout=true»).permitAll();
logout.invalidateHttpSession(true).permitAll();
logout.deleteCookies(«JSESSIONID»).permitAll();
})
.httpBasic(Customizer.withDefaults()) // support basic auth
.oauth2Login(oauth -> {
oauth.loginPage(«/login»).permitAll();
oauth.defaultSuccessUrl(«/private»);
oauth.failureUrl(«/login?error=true»).permitAll();
}) // OpenID Connect with google
.addFilterBefore(new CustFilter(), UsernamePasswordAuthenticationFilter.class)
.authenticationProvider(new AdminAuthenticateProvider())
.csrf()
.disable()
.build();
}

@Bean
public UserDetailsService userDetailsService(){
return new InMemoryUserDetailsManager(
User.builder()
.username(«henry»)
.password(«{noop}password»)
.authorities(«ROLE_USER»)
.build()
);
}

@Bean
public WebSecurityCustomizer webSecurityCustomizer() {
return (web) -> web.ignoring() .requestMatchers(«/resources/**», «/static/**», «/css/**»);
}
}

import org.springframework.security.authentication.AuthenticationProvider;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.authority.AuthorityUtils;

public class AdminAuthenticateProvider implements AuthenticationProvider {
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
var username = authentication.getName();
if(«admin».equalsIgnoreCase(username)){
return UsernamePasswordAuthenticationToken.authenticated(
«admin»,
null,
AuthorityUtils.createAuthorityList(«ROLE_ADMIN»)
);
}
return null;
}

@Override
public boolean supports(Class<?> authentication) {
return UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication);
}
}

import jakarta.servlet.*;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import org.springframework.web.filter.OncePerRequestFilter;

import java.io.IOException;

public class CustFilter extends OncePerRequestFilter {

@Override
protected void doFilterInternal(HttpServletRequest request,
HttpServletResponse response,
FilterChain filterChain) throws ServletException, IOException {
System.out.println(«Hello filter»);
filterChain.doFilter(request, response);
}
}

1. Create new project or choose existing project.
2. Go to APIs & Services or Type oauth in search bar
3. Choose  Credentials 
4. Click on CREATE CREDENTIALS ->  OAuth client ID 
5. Application Type -> Web application
6. Name -> your app name
7. Authorized redirect URIs: http://localhost:8080/login/oauth2/code/google
8. CREATE