Package com.totvs.tjf.autoconfigure

Class WebSecurityAutoConfiguration

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

com.totvs.tjf.autoconfigure.WebSecurityAutoConfiguration

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

@Configuration
@EnableWebSecurity
@Order(99)
@EnableCaching
public class WebSecurityAutoConfiguration
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Implementation of the WebSecurityConfigurerAdapter.

The OAuth2 Resource Servers, enabling a Spring Security filter protected by OAuth2 security.

Author:

Roger Steuernagel

Constructor Summary

Constructors

Constructor

Description

WebSecurityAutoConfiguration(com.fasterxml.jackson.databind.ObjectMapper mapper, com.totvs.tjf.core.security.context.TenantConverter tenantConverter, SecurityCorsProperties securityCorsProperties, SecurityAccessApiProperties securityAccessApiProperties, SecurityConfigProperties securityConfigProperties, SecurityProtectedProperties securityProtectedProperties, SecurityCsrfProperties securityCsrfProperties, RacTokenService racTokenService)

The ResourceServerProperties is a shortcut to the Oauth2 settings.

Method Summary

Modifier and Type	Method	Description
void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity httpDefault)	Endpoint security configuration
org.springframework.web.cors.CorsConfigurationSource	corsConfigurationSource()	Setup CORS configurations used by Fluig Apps

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

WebSecurityAutoConfiguration

public WebSecurityAutoConfiguration(com.fasterxml.jackson.databind.ObjectMapper mapper,
 com.totvs.tjf.core.security.context.TenantConverter tenantConverter,
 SecurityCorsProperties securityCorsProperties,
 SecurityAccessApiProperties securityAccessApiProperties,
 SecurityConfigProperties securityConfigProperties,
 SecurityProtectedProperties securityProtectedProperties,
 SecurityCsrfProperties securityCsrfProperties,
 RacTokenService racTokenService)

The ResourceServerProperties is a shortcut to the Oauth2 settings.

Parameters:

securityConfigProperties - Configuration properties for OAuth2 Resources.

Method Details

configure

public void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity httpDefault)
               throws Exception

Endpoint security configuration

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Parameters:

httpDefault - the current http filter configuration.

Throws:

Exception

corsConfigurationSource

@Bean
@ConditionalOnExpression("${security.cors.enabled:true} or ${tjf.security.cors.enabled:true}")
public org.springframework.web.cors.CorsConfigurationSource corsConfigurationSource()

Setup CORS configurations used by Fluig Apps

Returns:

CorsConfigurationSource