feat(security): enhance security filter chain and add custom exception handling

Co-authored-by: Copilot <copilot@github.com>

Author: Theo-lbg

src/main/java/com/xpeho/spring_boot_java_random_user/config/SecurityConfig.java

@@ -20,6 +20,9 @@
 @EnableWebSecurity
 public class SecurityConfig {
 
+        private static final String RANDOM_USERS_PATH = "/random-users/**";
+        private static final String ADMIN_ROLE = "ADMIN";
+
         @Value("${app.security.admin.username}")
         private String adminUsername;
 
@@ -39,35 +42,39 @@ public class SecurityConfig {
         private String testPassword;
 
     @Bean
-    SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
-        http
-                .csrf(csrf -> csrf.ignoringRequestMatchers("/random-users/**"))
-                .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
-                .httpBasic(Customizer.withDefaults())
-                .authorizeHttpRequests(auth -> auth
-                        .requestMatchers(
-                                "/api/**",
-                                "/swagger-ui/**",
-                                "/swagger-ui.html",
-                                "/v3/api-docs/**",
-                                "/actuator/health"
-                        ).permitAll()
-                        .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll()
-                        .requestMatchers(HttpMethod.GET, "/random-users/**").hasAnyRole("ADMIN", "USER", "TEST")
-                        .requestMatchers(HttpMethod.POST, "/random-users/**").hasRole("ADMIN")
-                        .requestMatchers(HttpMethod.PUT, "/random-users/**").hasRole("ADMIN")
-                        .requestMatchers(HttpMethod.DELETE, "/random-users/**").hasRole("ADMIN")
-                        .anyRequest().authenticated()
-                );
-
-        return http.build();
+    SecurityFilterChain securityFilterChain(HttpSecurity http) {
+        try {
+            http
+                    .csrf(csrf -> csrf.ignoringRequestMatchers(RANDOM_USERS_PATH))
+                    .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
+                    .httpBasic(Customizer.withDefaults())
+                    .authorizeHttpRequests(auth -> auth
+                            .requestMatchers(
+                                    "/api/**",
+                                    "/swagger-ui/**",
+                                    "/swagger-ui.html",
+                                    "/v3/api-docs/**",
+                                    "/actuator/health"
+                            ).permitAll()
+                            .requestMatchers(HttpMethod.OPTIONS, "/**").permitAll()
+                            .requestMatchers(HttpMethod.GET, RANDOM_USERS_PATH).hasAnyRole(ADMIN_ROLE, "USER", "TEST")
+                            .requestMatchers(HttpMethod.POST, RANDOM_USERS_PATH).hasRole(ADMIN_ROLE)
+                            .requestMatchers(HttpMethod.PUT, RANDOM_USERS_PATH).hasRole(ADMIN_ROLE)
+                            .requestMatchers(HttpMethod.DELETE, RANDOM_USERS_PATH).hasRole(ADMIN_ROLE)
+                            .anyRequest().authenticated()
+                    );
+
+            return http.build();
+        } catch (Exception exception) {
+            throw new SecurityConfigurationException("Failed to build Spring Security filter chain", exception);
+        }
     }
 
     @Bean
     UserDetailsService userDetailsService(PasswordEncoder passwordEncoder) {
         UserDetails admin = User.withUsername(adminUsername)
                 .password(passwordEncoder.encode(adminPassword))
-                .roles("ADMIN")
+                .roles(ADMIN_ROLE)
                 .build();
 
         UserDetails user = User.withUsername(userUsername)

src/main/java/com/xpeho/spring_boot_java_random_user/config/SecurityConfigurationException.java

@@ -0,0 +1,8 @@
+package com.xpeho.spring_boot_java_random_user.config;
+
+public class SecurityConfigurationException extends RuntimeException {
+
+    public SecurityConfigurationException(String message, Throwable cause) {
+        super(message, cause);
+    }
+}