me.alidg.errors.conf

Class ReactiveSecurityErrorsAutoConfiguration

java.lang.Object

me.alidg.errors.conf.ReactiveSecurityErrorsAutoConfiguration

@ConditionalOnWebApplication(type=REACTIVE)
 @ConditionalOnBean(value=org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler.class)
 @ConditionalOnClass(name="org.springframework.security.web.server.authorization.ServerAccessDeniedHandler")
public class ReactiveSecurityErrorsAutoConfiguration
extends Object

A reactive specific auto-configuration to register an ServerAccessDeniedHandler and another ServerAuthenticationEntryPoint when the Reactive Spring Security is detected. These two handlers are just gonna eventually delegate the exception handling procedure to plain old WebErrorHandlers.

Author:

Ali Dehghani

Implementation Note:

In contrast with other handlers which register themselves automatically, in order to use these two handlers, you should register them in your security configuration manually as follows:

 
 @EnableWebFluxSecurity
 public class WebFluxSecurityConfig {

     // other configurations

     @Bean
     public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http,
                                                             ServerAccessDeniedHandler accessDeniedHandler,
                                                             ServerAuthenticationEntryPoint authenticationEntryPoint) {
         http
                 .csrf().accessDeniedHandler(accessDeniedHandler)
                 .and()
                 .exceptionHandling()
                     .accessDeniedHandler(accessDeniedHandler)
                     .authenticationEntryPoint(authenticationEntryPoint)
                 // other configurations

         return http.build();
     }
 }
 
 

Constructor Summary

Constructors

Constructor and Description
ReactiveSecurityErrorsAutoConfiguration()

Method Summary

Modifier and Type	Method and Description
org.springframework.security.web.server.authorization.ServerAccessDeniedHandler	accessDeniedHandler(org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler errorWebExceptionHandler) Responsible for catching all access denied exceptions and delegating them to typical web error handlers to perform the actual exception handling procedures.
org.springframework.security.web.server.ServerAuthenticationEntryPoint	authenticationEntryPoint(org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler errorWebExceptionHandler) Responsible for catching all authentication exceptions and delegating them to typical web error handlers to perform the actual exception handling procedures.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ReactiveSecurityErrorsAutoConfiguration

public ReactiveSecurityErrorsAutoConfiguration()

Method Detail

accessDeniedHandler

@Bean
 @ConditionalOnClass(name="org.springframework.security.web.server.authorization.ServerAccessDeniedHandler")
public org.springframework.security.web.server.authorization.ServerAccessDeniedHandler accessDeniedHandler(org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler errorWebExceptionHandler)

Responsible for catching all access denied exceptions and delegating them to typical web error handlers to perform the actual exception handling procedures.

Parameters:

errorWebExceptionHandler - Spring Boot's default exception handler which in turn would delegate to our typical error handlers.

Returns:

The registered access denied handler.

authenticationEntryPoint

@Bean
 @ConditionalOnClass(name="org.springframework.security.web.server.ServerAuthenticationEntryPoint")
public org.springframework.security.web.server.ServerAuthenticationEntryPoint authenticationEntryPoint(org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler errorWebExceptionHandler)

Responsible for catching all authentication exceptions and delegating them to typical web error handlers to perform the actual exception handling procedures.

Parameters:

errorWebExceptionHandler - Spring Boot's default exception handler which in turn would delegate to our typical error handlers.

Returns:

The registered authentication entry point.