package org.petify.shelter.config;
   
   import org.springframework.context.annotation.Bean;
   import org.springframework.context.annotation.Configuration;
   import org.springframework.security.config.annotation.web.builders.HttpSecurity;
   import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
   import org.springframework.security.config.http.SessionCreationPolicy;
   import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter;
   import org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter;
  import org.springframework.security.web.SecurityFilterChain;
  
  @Configuration
  public class JwtSecurityConfig {
  
      @Bean
      public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
          http
                  .csrf(AbstractHttpConfigurer::disable)
                  .authorizeHttpRequests(auth -> auth
                          .requestMatchers("/shelters/**").permitAll()
                          .requestMatchers("/pets/**").permitAll()
                          .requestMatchers("/adoptions/**").permitAll()
                          .requestMatchers(
                                  "/swagger-ui.html",
                                  "/swagger-ui/**",
                                  "/v3/api-docs",
                                  "/v3/api-docs/**",
                                  "/actuator/health"
                          ).permitAll()
                  )
                  .sessionManagement(session -> session
                          .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                  )
                  .oauth2ResourceServer(oauth2 -> oauth2
                          .jwt(jwt -> jwt
                                  .jwtAuthenticationConverter(jwtAuthenticationConverter())
                          )
                  );
          return http.build();
      }
  
      @Bean
      public JwtAuthenticationConverter jwtAuthenticationConverter() {
          JwtGrantedAuthoritiesConverter grantedAuthoritiesConverter = new JwtGrantedAuthoritiesConverter();
          grantedAuthoritiesConverter.setAuthorityPrefix("ROLE_");
          grantedAuthoritiesConverter.setAuthoritiesClaimName("roles");
  
          JwtAuthenticationConverter jwtAuthenticationConverter = new JwtAuthenticationConverter();
          jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter(grantedAuthoritiesConverter);
          return jwtAuthenticationConverter;
      }
  }