Package io.dialob.boot.security

Class ApiServiceSecurityConfigurer

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

io.dialob.boot.security.AbstractWebSecurityConfigurer

io.dialob.boot.security.AbstractApiSecurityConfigurer

io.dialob.boot.security.ApiServiceSecurityConfigurer

All Implemented Interfaces:

org.springframework.core.Ordered, org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

public class ApiServiceSecurityConfigurer
extends AbstractApiSecurityConfigurer

Field Summary

Fields

Modifier and Type	Field	Description
static org.springframework.security.web.util.matcher.RequestMatcher	SESSION_NOT_EXISTS_MATCHER

Fields inherited from class io.dialob.boot.security.AbstractApiSecurityConfigurer

ALLOW_SAME_ORIGIN, PERMIT_ALL, SESSION_EXISTS_MATCHER

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor	Description
ApiServiceSecurityConfigurer(ClientApiKeyService apiKeyService, ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider, ApiKeyValidator apiKeyValidator, DialobSettings settings, io.dialob.security.key.ServletRequestApiKeyExtractor keyRequestExtractor, TenantAccessEvaluator tenantPermissionEvaluator, AuthenticationStrategy authenticationStrategy, boolean allRequests)

Method Summary

Modifier and Type	Method	Description
protected ApiKeyAuthenticationProvider	apiKeyAuthenticationProvider(ClientApiKeyService apiKeyService, ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider, ApiKeyValidator apiRequestValidator)
protected org.springframework.security.web.util.matcher.RequestMatcher	apiKeyRequestMatcher()
protected void	configure(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureAuthentication(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureCsrf(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	configureMDCPrincipalFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.web.util.matcher.RequestMatcher	requestMatcher()

Methods inherited from class io.dialob.boot.security.AbstractApiSecurityConfigurer

configurePermissions, getTenantRequiredMatcher

Methods inherited from class io.dialob.boot.security.AbstractWebSecurityConfigurer

configure, configureAuthenticationManager, configureCors, configureLogout, configureRequestParameterTenantScopeFilter, getContextPath, getDefaultTenantSupplier, getOrder, getRequestParameterTenantScopeFilter, getTenantPermissionEvaluator, withOrder

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, authenticationManagerBean, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.core.Ordered

getOrder

Field Detail

SESSION_NOT_EXISTS_MATCHER

public static final org.springframework.security.web.util.matcher.RequestMatcher SESSION_NOT_EXISTS_MATCHER

Constructor Detail

ApiServiceSecurityConfigurer

public ApiServiceSecurityConfigurer(@NonNull
                                    ClientApiKeyService apiKeyService,
                                    @NonNull
                                    ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider,
                                    @NonNull
                                    ApiKeyValidator apiKeyValidator,
                                    @NonNull
                                    DialobSettings settings,
                                    @NonNull
                                    io.dialob.security.key.ServletRequestApiKeyExtractor keyRequestExtractor,
                                    @NonNull
                                    TenantAccessEvaluator tenantPermissionEvaluator,
                                    @NonNull
                                    AuthenticationStrategy authenticationStrategy,
                                    @NonNull
                                    boolean allRequests)

Method Detail

apiKeyRequestMatcher

protected org.springframework.security.web.util.matcher.RequestMatcher apiKeyRequestMatcher()

requestMatcher

protected org.springframework.security.web.util.matcher.RequestMatcher requestMatcher()

Overrides:

requestMatcher in class AbstractWebSecurityConfigurer

configureAuthentication

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureAuthentication(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                    throws Exception

Overrides:

configureAuthentication in class AbstractWebSecurityConfigurer

Throws:

Exception

configureCsrf

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureCsrf(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                          throws Exception

Overrides:

configureCsrf in class AbstractWebSecurityConfigurer

Throws:

Exception

configureFrameOptions

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                  throws Exception

Overrides:

configureFrameOptions in class AbstractWebSecurityConfigurer

Throws:

Exception

apiKeyAuthenticationProvider

protected ApiKeyAuthenticationProvider apiKeyAuthenticationProvider(@NonNull
                                                                    ClientApiKeyService apiKeyService,
                                                                    @NonNull
                                                                    ApiKeyAuthoritiesProvider apiKeyAuthoritiesProvider,
                                                                    @NonNull
                                                                    ApiKeyValidator apiRequestValidator)

configure

protected void configure(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
                  throws Exception

Overrides:

configure in class AbstractWebSecurityConfigurer

Throws:

Exception

configureMDCPrincipalFilter

protected org.springframework.security.config.annotation.web.builders.HttpSecurity configureMDCPrincipalFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                        throws Exception

Overrides:

configureMDCPrincipalFilter in class AbstractWebSecurityConfigurer

Throws:

Exception