sMJRdASc

1http
2    .logout().logoutSuccessUrl("/").permitAll().and()
3    .authorizeRequests().antMatchers("/", "/login", "/home.html").permitAll()
4    .anyRequest().authenticated()
5    .and().csrf().csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse());
6	
7http.antMatcher("/api/**").authorizeRequests().anyRequest().authenticated();
8	
9security:
10  oauth2:
11    client:
12      client-id: <CLIENT_ID>
13      token-name: oauth_token
14      authentication-scheme: query
15      client-authentication-scheme: form
16      access-token-uri: https://graph.facebook.com/oauth/access_token
17      user-authorization-uri: https://www.facebook.com/dialog/oauth
18    resource:
19      user-info-uri: https://graph.facebook.com/me
20      client-id: <CLIENT_ID>
21      client-secret: <CLIENT_SECRET>
22      token-type: code