Package de.trustable.ca3s.core.config

Class SecurityConfiguration

  • @Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled=true,
                            securedEnabled=true)
@Import(org.zalando.problem.spring.web.advice.security.SecurityProblemSupport.class)
@Order(2)
public class SecurityConfiguration
extends Object

    • Constructor Summary

      Constructors 
      Constructor Description
      SecurityConfiguration​(TokenProvider tokenProvider, org.springframework.web.filter.CorsFilter corsFilter, org.zalando.problem.spring.web.advice.security.SecurityProblemSupport problemSupport, DomainUserDetailsService userDetailsService, boolean apiKeyEnabled, String apiKeyRequestHeader, String apiKeyAdminValue)  

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.security.authentication.AuthenticationManager authManager​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)  
      org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer configure()  
      org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()  
      org.springframework.security.web.SecurityFilterChain filterChain​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)  
      org.springframework.security.saml.metadata.MetadataGenerator metadataGenerator()  
      org.springframework.security.saml.metadata.MetadataGeneratorFilter metadataGeneratorFilter()  
      org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()  
      static org.springframework.security.saml.SAMLBootstrap SAMLBootstrap()  
      org.springframework.security.saml.SAMLDiscovery samlDiscovery()  
      org.springframework.security.web.FilterChainProxy samlFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)  
      org.springframework.security.saml.SAMLProcessingFilter samlWebSSOProcessingFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)  

    • Constructor Detail

      • SecurityConfiguration

        public SecurityConfiguration​(TokenProvider tokenProvider,
                             org.springframework.web.filter.CorsFilter corsFilter,
                             org.zalando.problem.spring.web.advice.security.SecurityProblemSupport problemSupport,
                             DomainUserDetailsService userDetailsService,
                             @Value("${ca3s.auth.api-key.enabled:false}")
                             boolean apiKeyEnabled,
                             @Value("${ca3s.auth.api-key.auth-token-header-name:X-API-KEY}")
                             String apiKeyRequestHeader,
                             @Value("${ca3s.auth.api-key.auth-token-admin:}")
                             String apiKeyAdminValue)

    • Method Detail

      • samlDiscovery

        @Bean
public org.springframework.security.saml.SAMLDiscovery samlDiscovery()

      • metadataGenerator

        public org.springframework.security.saml.metadata.MetadataGenerator metadataGenerator()

      • SAMLBootstrap

        @Bean
public static org.springframework.security.saml.SAMLBootstrap SAMLBootstrap()

      • samlWebSSOProcessingFilter

        @Bean
public org.springframework.security.saml.SAMLProcessingFilter samlWebSSOProcessingFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)
                                                                                  throws Exception
        Throws:
        Exception

      • metadataGeneratorFilter

        @Bean
public org.springframework.security.saml.metadata.MetadataGeneratorFilter metadataGeneratorFilter()

      • passwordEncoder

        @Bean
public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()

      • daoAuthenticationProvider

        @Bean
public org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()

      • authManager

        @Bean
public org.springframework.security.authentication.AuthenticationManager authManager​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                              throws Exception
        Throws:
        Exception

      • samlFilter

        @Bean
public org.springframework.security.web.FilterChainProxy samlFilter​(org.springframework.security.authentication.AuthenticationManager authenticationManager)
                                                             throws Exception
        Throws:
        Exception

      • configure

        @Bean
public org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer configure()

      • filterChain

        @Bean
public org.springframework.security.web.SecurityFilterChain filterChain​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                 throws Exception
        Throws:
        Exception