org.springframework.cloud.common.security

Class OAuthSecurityConfiguration

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

org.springframework.cloud.common.security.OAuthSecurityConfiguration

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

@Configuration
 @ConditionalOnClass(value=org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter.class)
 @ConditionalOnMissingBean(value=org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter.class)
 @ConditionalOnWebApplication(type=ANY)
 @EnableWebSecurity
 @Conditional(value=OnOAuth2SecurityEnabled.class)
public class OAuthSecurityConfiguration
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Setup Spring Security OAuth for the Rest Endpoints of Spring Cloud Data Flow.

Author:

Gunnar Hillert, Ilayaperumal Gopinathan

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	OAuthSecurityConfiguration.BrowserDetectingContentNegotiationStrategy

Field Summary

Fields

Modifier and Type	Field and Description
protected org.springframework.context.ApplicationEventPublisher	applicationEventPublisher
protected AuthorizationProperties	authorizationProperties
protected org.springframework.security.oauth2.client.registration.ClientRegistrationRepository	clientRegistrationRepository
protected org.springframework.security.oauth2.client.OAuth2AuthorizedClientService	oauth2AuthorizedClientService
protected org.springframework.boot.autoconfigure.security.oauth2.client.OAuth2ClientProperties	oauth2ClientProperties
protected org.springframework.security.oauth2.client.endpoint.OAuth2AccessTokenResponseClient<org.springframework.security.oauth2.client.endpoint.OAuth2PasswordGrantRequest>	oAuth2PasswordTokenResponseClient
protected org.springframework.boot.autoconfigure.security.oauth2.resource.OAuth2ResourceServerProperties	oAuth2ResourceServerProperties
protected org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector	opaqueTokenIntrospector
protected org.springframework.boot.autoconfigure.security.SecurityProperties	securityProperties
protected SecurityStateBean	securityStateBean

Constructor Summary

Constructors

Constructor and Description
OAuthSecurityConfiguration()

Method Summary

Modifier and Type	Method and Description
protected org.springframework.security.authentication.AuthenticationProvider	authenticationProvider()
AuthoritiesMapper	authorityMapper()
org.springframework.security.oauth2.client.OAuth2AuthorizedClientManager	authorizedClientManager(org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository, org.springframework.security.oauth2.client.web.OAuth2AuthorizedClientRepository authorizedClientRepository)
protected void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected String	dashboard(String path)
protected org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt,org.springframework.security.authentication.AbstractAuthenticationToken>	grantedAuthoritiesExtractor()
void	handleOAuth2AuthenticationFailureEvent(org.springframework.security.authentication.event.AbstractAuthenticationFailureEvent authenticationFailureEvent)
protected OAuth2TokenUtilsService	oauth2TokenUtilsService()
protected org.springframework.security.oauth2.client.userinfo.OAuth2UserService<org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest,org.springframework.security.oauth2.core.oidc.user.OidcUser>	oidcUserService()
protected org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector	opaqueTokenIntrospector()
protected org.springframework.security.oauth2.client.userinfo.OAuth2UserService<org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest,org.springframework.security.oauth2.core.user.OAuth2User>	plainOauth2UserService()
protected org.springframework.security.authentication.ProviderManager	providerManager()

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

oauth2ClientProperties

@Autowired
protected org.springframework.boot.autoconfigure.security.oauth2.client.OAuth2ClientProperties oauth2ClientProperties

securityStateBean

@Autowired
protected SecurityStateBean securityStateBean

securityProperties

@Autowired
protected org.springframework.boot.autoconfigure.security.SecurityProperties securityProperties

applicationEventPublisher

@Autowired
protected org.springframework.context.ApplicationEventPublisher applicationEventPublisher

authorizationProperties

@Autowired
protected AuthorizationProperties authorizationProperties

oAuth2ResourceServerProperties

@Autowired
protected org.springframework.boot.autoconfigure.security.oauth2.resource.OAuth2ResourceServerProperties oAuth2ResourceServerProperties

oAuth2PasswordTokenResponseClient

@Autowired
protected org.springframework.security.oauth2.client.endpoint.OAuth2AccessTokenResponseClient<org.springframework.security.oauth2.client.endpoint.OAuth2PasswordGrantRequest> oAuth2PasswordTokenResponseClient

clientRegistrationRepository

@Autowired
protected org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository

opaqueTokenIntrospector

@Autowired(required=false)
protected org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector opaqueTokenIntrospector

oauth2AuthorizedClientService

@Autowired
protected org.springframework.security.oauth2.client.OAuth2AuthorizedClientService oauth2AuthorizedClientService

Constructor Detail

OAuthSecurityConfiguration

public OAuthSecurityConfiguration()

Method Detail

configure

protected void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                  throws Exception

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

Exception

grantedAuthoritiesExtractor

protected org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt,org.springframework.security.authentication.AbstractAuthenticationToken> grantedAuthoritiesExtractor()

opaqueTokenIntrospector

@Bean
 @ConditionalOnProperty(prefix="spring.security.oauth2.resourceserver.opaquetoken",
                       value="introspection-uri")
protected org.springframework.security.oauth2.server.resource.introspection.OpaqueTokenIntrospector opaqueTokenIntrospector()

oidcUserService

@Bean
protected org.springframework.security.oauth2.client.userinfo.OAuth2UserService<org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest,org.springframework.security.oauth2.core.oidc.user.OidcUser> oidcUserService()

plainOauth2UserService

@Bean
protected org.springframework.security.oauth2.client.userinfo.OAuth2UserService<org.springframework.security.oauth2.client.userinfo.OAuth2UserRequest,org.springframework.security.oauth2.core.user.OAuth2User> plainOauth2UserService()

authorizedClientManager

@Bean
public org.springframework.security.oauth2.client.OAuth2AuthorizedClientManager authorizedClientManager(org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository,
                                                                                                              org.springframework.security.oauth2.client.web.OAuth2AuthorizedClientRepository authorizedClientRepository)

authorityMapper

@Bean
public AuthoritiesMapper authorityMapper()

authenticationProvider

@Bean
 @ConditionalOnProperty(prefix="spring.security.oauth2.resourceserver.opaquetoken",
                       value="introspection-uri")
protected org.springframework.security.authentication.AuthenticationProvider authenticationProvider()

providerManager

@Bean
 @ConditionalOnProperty(prefix="spring.security.oauth2.resourceserver.opaquetoken",
                       value="introspection-uri")
protected org.springframework.security.authentication.ProviderManager providerManager()

oauth2TokenUtilsService

@Bean
protected OAuth2TokenUtilsService oauth2TokenUtilsService()

handleOAuth2AuthenticationFailureEvent

@EventListener
public void handleOAuth2AuthenticationFailureEvent(org.springframework.security.authentication.event.AbstractAuthenticationFailureEvent authenticationFailureEvent)

dashboard

protected String dashboard(String path)