Package io.dialob.boot.security

Class AbstractApiSecurityConfigurer

java.lang.Object

io.dialob.boot.security.AbstractWebSecurityConfigurer

io.dialob.boot.security.AbstractApiSecurityConfigurer

Direct Known Subclasses:

ApiServiceSecurityConfigurer, WebApiSecurityConfigurer

public abstract class AbstractApiSecurityConfigurer
extends AbstractWebSecurityConfigurer

Field Summary

Fields

Modifier and Type	Field	Description
static org.springframework.web.cors.CorsConfiguration	ALLOW_SAME_ORIGIN
static org.springframework.web.cors.CorsConfiguration	PERMIT_ALL
static org.springframework.security.web.util.matcher.RequestMatcher	SESSION_EXISTS_MATCHER

Constructor Summary

Constructors

Constructor	Description
AbstractApiSecurityConfigurer(String contextPath, TenantAccessEvaluator tenantPermissionEvaluator, AuthenticationStrategy authenticationStrategy)

Method Summary

Modifier and Type	Method	Description
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configurePermissions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.web.util.matcher.RequestMatcher	getTenantRequiredMatcher()

Methods inherited from class io.dialob.boot.security.AbstractWebSecurityConfigurer

configureAuthentication, configureAuthenticationManager, configureCors, configureCsrf, configureFrameOptions, configureLogout, configureMDCPrincipalFilter, configureRequestParameterTenantScopeFilter, getContextPath, getDefaultTenantSupplier, getRequestParameterTenantScopeFilter, getTenantPermissionEvaluator, requestMatcher

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PERMIT_ALL

public static final org.springframework.web.cors.CorsConfiguration PERMIT_ALL

ALLOW_SAME_ORIGIN

public static final org.springframework.web.cors.CorsConfiguration ALLOW_SAME_ORIGIN

SESSION_EXISTS_MATCHER

public static final org.springframework.security.web.util.matcher.RequestMatcher SESSION_EXISTS_MATCHER

Constructor Detail

AbstractApiSecurityConfigurer

public AbstractApiSecurityConfigurer(String contextPath,
                                     TenantAccessEvaluator tenantPermissionEvaluator,
                                     @NonNull
                                     AuthenticationStrategy authenticationStrategy)

Method Detail

configurePermissions

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configurePermissions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                 throws Exception

Specified by:

configurePermissions in class AbstractWebSecurityConfigurer

Throws:

Exception

getTenantRequiredMatcher

@NonNull
protected org.springframework.security.web.util.matcher.RequestMatcher getTenantRequiredMatcher()

Overrides:

getTenantRequiredMatcher in class AbstractWebSecurityConfigurer