Class SecurityConfiguration


  • @Configuration
    @EnableWebSecurity
    @EnableGlobalMethodSecurity(prePostEnabled=true,
                                securedEnabled=true)
    @Import(org.zalando.problem.spring.web.advice.security.SecurityProblemSupport.class)
    @Order(2)
    public class SecurityConfiguration
    extends Object
    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.security.authentication.AuthenticationManager authManager​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)  
      org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer configure()  
      org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()  
      org.springframework.security.web.SecurityFilterChain filterChain​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)  
      org.springframework.security.saml.metadata.MetadataGenerator metadataGenerator()  
      org.springframework.security.saml.metadata.MetadataGeneratorFilter metadataGeneratorFilter()  
      org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()  
      static org.springframework.security.saml.SAMLBootstrap SAMLBootstrap()  
      org.springframework.security.saml.SAMLDiscovery samlDiscovery()  
      org.springframework.security.web.FilterChainProxy samlFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)  
      org.springframework.security.saml.SAMLProcessingFilter samlWebSSOProcessingFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)  
    • Constructor Detail

      • SecurityConfiguration

        public SecurityConfiguration​(TokenProvider tokenProvider,
                                     org.springframework.web.filter.CorsFilter corsFilter,
                                     org.zalando.problem.spring.web.advice.security.SecurityProblemSupport problemSupport,
                                     DomainUserDetailsService userDetailsService,
                                     ClientAuthConfig clientAuthConfig,
                                     @Value("${ca3s.auth.api-key.enabled:false}")
                                     boolean apiKeyEnabled,
                                     @Value("${ca3s.auth.api-key.auth-token-header-name:X-API-KEY}")
                                     String apiKeyRequestHeader,
                                     @Value("${ca3s.auth.api-key.auth-token-admin:}")
                                     String apiKeyAdminValue)
    • Method Detail

      • samlDiscovery

        @Bean
        public org.springframework.security.saml.SAMLDiscovery samlDiscovery()
      • metadataGenerator

        public org.springframework.security.saml.metadata.MetadataGenerator metadataGenerator()
      • SAMLBootstrap

        @Bean
        public static org.springframework.security.saml.SAMLBootstrap SAMLBootstrap()
      • samlWebSSOProcessingFilter

        @Bean
        public org.springframework.security.saml.SAMLProcessingFilter samlWebSSOProcessingFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)
                                                                                          throws Exception
        Throws:
        Exception
      • metadataGeneratorFilter

        @Bean
        public org.springframework.security.saml.metadata.MetadataGeneratorFilter metadataGeneratorFilter()
      • passwordEncoder

        @Bean
        public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()
      • daoAuthenticationProvider

        @Bean
        public org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()
      • authManager

        @Bean
        public org.springframework.security.authentication.AuthenticationManager authManager​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                      throws Exception
        Throws:
        Exception
      • samlFilter

        @Bean
        public org.springframework.security.web.FilterChainProxy samlFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)
                                                                     throws Exception
        Throws:
        Exception
      • configure

        @Bean
        public org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer configure()
      • filterChain

        @Bean
        public org.springframework.security.web.SecurityFilterChain filterChain​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                         throws Exception
        Throws:
        Exception