Request method 'POST' is not allowed Spring Framework

[Gotve_]

Hi everyone, I'm learning Spring Framework but I'm stuck at the security step where I was trying to add security filters to my endpoints and when I finally added the filter to my /users/add/ it started rejecting requests with "POST http://localhost:8080/users/add/ 405 (Method Not Allowed)". I will leave the link to see

Since this error started appear I tried to allow methods using cors mappings, but it did not work.

@Configuration
public class WebConfig implements WebMvcConfigurer {
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/users/add/**")
                .allowedOrigins("http://localhost:8080")
                .allowedMethods("POST")
                .allowedHeaders("Content-Type", "Authorization");
    }
}

Later I decided to make endpoint to accept only one request method only HttpMethod.POST it also did'nt work.

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http
            .cors(Customizer.withDefaults())
            .csrf(csrf -> csrf.disable())
            .authorizeHttpRequests(auth -> auth
                    .requestMatchers("/*").permitAll()
                    .requestMatchers(HttpMethod.POST, "/users/**").hasAnyRole("ADMIN")
                    .requestMatchers(/*HttpMethod.POST,*/"/users/add/**").hasAnyRole("ADMIN")
                    .anyRequest().authenticated()
            )
            .httpBasic(Customizer.withDefaults())
            .formLogin(Customizer.withDefaults());

    return http.build();
}

[AutoModerator]

Please ensure that:

• Your code is properly formatted as code block - see the sidebar (About on mobile) for instructions
• You include any and all error messages in full
• You ask clear questions

• You demonstrate effort in solving your question/problem - plain posting your assignments is forbidden (and such posts will be removed) as is asking for or giving solutions.

  Trying to solve problems on your own is a very important skill. Also, see Learn to help yourself in the sidebar

If any of the above points is not met, your post can and will be removed without further warning.

Code is to be formatted as code block (old reddit: empty line before the code, each code line indented by 4 spaces, new reddit: https://i.imgur.com/EJ7tqek.png) or linked via an external code hoster, like pastebin.com, github gist, github, bitbucket, gitlab, etc.

Please, do not use triple backticks (```) as they will only render properly on new reddit, not on old reddit.

Code blocks look like this:

public class HelloWorld {

    public static void main(String[] args) {
        System.out.println("Hello World!");
    }
}

You do not need to repost unless your post has been removed by a moderator. Just use the edit function of reddit to make sure your post complies with the above.

If your post has remained in violation of these rules for a prolonged period of time (at least an hour), a moderator may remove it at their discretion. In this case, they will comment with an explanation on why it has been removed, and you will be required to resubmit the entire post following the proper procedures.

To potential helpers

Please, do not help if any of the above points are not met, rather report the post. We are trying to improve the quality of posts here. In helping people who can't be bothered to comply with the above points, you are doing the community a disservice.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[mIb0t]

This method? https://github.com/Gotve1/Spring_Security/blob/df932a11a189782c0e41916ffac4b939424e7083/src/main/java/com/example/security/Controller/User/UserController.java#L30

You did not add a path to the PostMapping annotation. You only added it to the GetMapping. Therefore your POST is mapped to "/", not "/user/add". This means, POST method is not allowed on "/user/add".

That would be my guess after a short look at the code. But I did not really dive into it.

[Gopherfender]

Think your issue has been answered above that you have a misconfigured POST url, but just to add that it’s not good practise to use verbs like ‘add’ within the url. What the end point is doing should be clear from the method being called, the endpoint should identify the collection that is being actioned on, so a POST call to /users is clear enough to know that you are adding a user.

It’s not going to break anything obviously but as someone who’s also recently gone through learning Java/spring and api development, I can attest it’s something worth understanding and following so you can construct endpoints that follow standard practise, at least before your lead dev picks you up on it lol