Add security to mutations

pom.xml

@@ -41,6 +41,10 @@
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter-web</artifactId>
 		</dependency>
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-security</artifactId>
+		</dependency>
 
 		<dependency>
 			<scope>compile</scope>
@@ -83,6 +87,11 @@
 			<artifactId>spring-boot-starter-test</artifactId>
 			<scope>test</scope>
 		</dependency>
+		<dependency>
+			<groupId>org.springframework.security</groupId>
+			<artifactId>spring-security-test</artifactId>
+			<scope>test</scope>
+		</dependency>
 
 	</dependencies>
 

src/main/java/com/karankumar/booksapi/config/SecurityConfig.java

@@ -0,0 +1,26 @@
+package com.karankumar.booksapi.config;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+
+@Configuration
+@EnableGlobalMethodSecurity(securedEnabled = true)
+public class SecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Override
+    public void configure(AuthenticationManagerBuilder auth) throws Exception {
+        auth.inMemoryAuthentication().withUser("admin").password("{noop}1234").roles("ADMIN");
+    }
+
+    @Override
+    public void configure(HttpSecurity http) throws Exception {
+        http
+                .csrf()
+                .disable()
+                .authorizeRequests()
+                .anyRequest().permitAll();
+    }
+}

src/main/java/com/karankumar/booksapi/mutations/AuthorMutation.java

@@ -21,9 +21,11 @@
 import com.netflix.graphql.dgs.DgsComponent;
 import com.netflix.graphql.dgs.DgsData;
 import graphql.schema.DataFetchingEnvironment;
+import org.springframework.security.access.annotation.Secured;
 
 import java.util.HashSet;
 
+@Secured("ROLE_ADMIN")
 @DgsComponent
 public class AuthorMutation {
     private final AuthorService authorService;

src/main/java/com/karankumar/booksapi/mutations/BookMutation.java

@@ -24,10 +24,12 @@
 import com.netflix.graphql.dgs.DgsData;
 import graphql.schema.DataFetchingEnvironment;
 import org.springframework.http.HttpStatus;
+import org.springframework.security.access.annotation.Secured;
 import org.springframework.web.server.ResponseStatusException;
 
 import java.util.Optional;
 
+@Secured("ROLE_ADMIN")
 @DgsComponent
 public class BookMutation {
     private final BookService bookService;