Package io.dialob.boot.security

Class ApiServiceSecurityConfigurer

java.lang.Object

io.dialob.boot.security.AbstractWebSecurityConfigurer

io.dialob.boot.security.AbstractApiSecurityConfigurer

io.dialob.boot.security.ApiServiceSecurityConfigurer

@Configuration
public class ApiServiceSecurityConfigurer
extends AbstractApiSecurityConfigurer

Field Summary

Fields

Modifier and Type	Field	Description
static org.springframework.security.web.util.matcher.RequestMatcher	SESSION_NOT_EXISTS_MATCHER

Fields inherited from class io.dialob.boot.security.AbstractApiSecurityConfigurer

ALLOW_SAME_ORIGIN, PERMIT_ALL, SESSION_EXISTS_MATCHER

Constructor Summary

Constructors

Constructor

Description

ApiServiceSecurityConfigurer(ClientApiKeyService apiKeyService, ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider, ApiKeyValidator apiKeyValidator, DialobSettings settings, io.dialob.security.key.ServletRequestApiKeyExtractor keyRequestExtractor, TenantAccessEvaluator tenantPermissionEvaluator, AuthenticationStrategy authenticationStrategy, org.springframework.security.authentication.AuthenticationManager authenticationManager, org.springframework.core.env.Environment env)

Method Summary

Modifier and Type	Method	Description
protected org.springframework.security.web.util.matcher.RequestMatcher	apiKeyRequestMatcher()
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureAuthentication(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureCsrf(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureMDCPrincipalFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.web.util.matcher.RequestMatcher	requestMatcher()

Methods inherited from class io.dialob.boot.security.AbstractApiSecurityConfigurer

configurePermissions, getTenantRequiredMatcher

Methods inherited from class io.dialob.boot.security.AbstractWebSecurityConfigurer

configureAuthenticationManager, configureCors, configureLogout, configureRequestParameterTenantScopeFilter, getContextPath, getDefaultTenantSupplier, getRequestParameterTenantScopeFilter, getTenantPermissionEvaluator

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SESSION_NOT_EXISTS_MATCHER

public static final org.springframework.security.web.util.matcher.RequestMatcher SESSION_NOT_EXISTS_MATCHER

Constructor Detail

ApiServiceSecurityConfigurer

public ApiServiceSecurityConfigurer(@NonNull
                                    ClientApiKeyService apiKeyService,
                                    @NonNull
                                    ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider,
                                    @NonNull
                                    ApiKeyValidator apiKeyValidator,
                                    @NonNull
                                    DialobSettings settings,
                                    @NonNull
                                    io.dialob.security.key.ServletRequestApiKeyExtractor keyRequestExtractor,
                                    @NonNull
                                    TenantAccessEvaluator tenantPermissionEvaluator,
                                    @NonNull
                                    AuthenticationStrategy authenticationStrategy,
                                    @NonNull
                                    org.springframework.security.authentication.AuthenticationManager authenticationManager,
                                    @NonNull
                                    org.springframework.core.env.Environment env)

Method Detail

apiKeyRequestMatcher

protected org.springframework.security.web.util.matcher.RequestMatcher apiKeyRequestMatcher()

requestMatcher

protected org.springframework.security.web.util.matcher.RequestMatcher requestMatcher()

Overrides:

requestMatcher in class AbstractWebSecurityConfigurer

configureAuthentication

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureAuthentication(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                    throws Exception

Overrides:

configureAuthentication in class AbstractWebSecurityConfigurer

Throws:

Exception

configureCsrf

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureCsrf(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                          throws Exception

Overrides:

configureCsrf in class AbstractWebSecurityConfigurer

Throws:

Exception

configureFrameOptions

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                  throws Exception

Overrides:

configureFrameOptions in class AbstractWebSecurityConfigurer

Throws:

Exception

configureMDCPrincipalFilter

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureMDCPrincipalFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                        throws Exception

Overrides:

configureMDCPrincipalFilter in class AbstractWebSecurityConfigurer

Throws:

Exception