Package com.aquima.web.boot.security

Class SecurityConfiguration

java.lang.Object

com.aquima.web.boot.security.SecurityConfiguration

@Configuration
@EnableWebSecurity
public class SecurityConfiguration
extends Object

Spring Security Configuration.

Since:

10.0

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SecurityConfiguration.GlobalSecurityConfiguration

Constructor Summary

Constructors

Constructor	Description
SecurityConfiguration()

Method Summary

Modifier and Type	Method	Description
org.springframework.security.authentication.AuthenticationProvider	anonymousAuthenticationProvider()
org.springframework.security.authentication.AuthenticationManager	blueriqAuthenticationManager(org.springframework.context.ApplicationContext applicationContext, org.springframework.core.env.Environment env, SecurityConfigProperties secConfigProps, org.springframework.security.config.annotation.ObjectPostProcessor<Object> objectPostProcessor, PasswordEncodersUtil passwordEncodersUtil, JwtClaimMapper jwtClaimMapper, AuditAuthenticationEventPublisher authenticationEventPublisher, OpenIdConnectSettings openIdConnectSettings, OpenIdConnectClient client)
OpenIdConnectClient	defaultOpenIdConnectClient(OpenIdConnectSettings openIdConnectSettings)
org.springframework.security.web.context.SecurityContextRepository	defaultSecurityContextRepository()
OpenIdConnectServiceAuthentication	openIdConnectServiceAccount(OpenIdConnectSettings openIdConnectSettings, OpenIdConnectClient client, org.springframework.security.authentication.AuthenticationManager authManager)
OpenIdConnectSettings	openIdConnectSettings(SecurityConfigProperties properties)
org.springframework.security.web.authentication.session.SessionAuthenticationStrategy	sessionFixationProtectionStrategy(SecurityConfigProperties secConfigProps)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SecurityConfiguration

public SecurityConfiguration()

Method Details

blueriqAuthenticationManager

@Bean
@RefreshScope
public org.springframework.security.authentication.AuthenticationManager blueriqAuthenticationManager(org.springframework.context.ApplicationContext applicationContext,
 org.springframework.core.env.Environment env,
 SecurityConfigProperties secConfigProps,
 org.springframework.security.config.annotation.ObjectPostProcessor<Object> objectPostProcessor,
 PasswordEncodersUtil passwordEncodersUtil,
 JwtClaimMapper jwtClaimMapper,
 @Autowired(required=false)
 AuditAuthenticationEventPublisher authenticationEventPublisher,
 @Autowired(required=false)
 OpenIdConnectSettings openIdConnectSettings,
 @Autowired(required=false)
 OpenIdConnectClient client)
                                                                                               throws Exception

Throws:

Exception

anonymousAuthenticationProvider

@Bean
public org.springframework.security.authentication.AuthenticationProvider anonymousAuthenticationProvider()

openIdConnectSettings

@Bean
@RefreshScope
@ConditionalOnProperty(name="blueriq.security.login-type",
                       havingValue="openid-connect")
public OpenIdConnectSettings openIdConnectSettings(SecurityConfigProperties properties)
                                            throws OpenIdConnectException

Throws:

OpenIdConnectException

defaultOpenIdConnectClient

@Bean
@ConditionalOnProperty(name="blueriq.security.login-type",
                       havingValue="openid-connect")
public OpenIdConnectClient defaultOpenIdConnectClient(OpenIdConnectSettings openIdConnectSettings)

openIdConnectServiceAccount

@Bean
@ConditionalOnProperty(name="blueriq.security.login-type",
                       havingValue="openid-connect")
public OpenIdConnectServiceAuthentication openIdConnectServiceAccount(OpenIdConnectSettings openIdConnectSettings,
 OpenIdConnectClient client,
 @Qualifier("blueriqAuthenticationManager")
 org.springframework.security.authentication.AuthenticationManager authManager)

defaultSecurityContextRepository

@Bean
@ConditionalOnMissingBean(org.springframework.security.web.context.SecurityContextRepository.class)
public org.springframework.security.web.context.SecurityContextRepository defaultSecurityContextRepository()

sessionFixationProtectionStrategy

@Bean
public org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionFixationProtectionStrategy(SecurityConfigProperties secConfigProps)