Package com.c4_soft.springaddons.security.oidc.starter.synchronised.client

Class SpringAddonsOidcClientWithLoginBeans

java.lang.Object
com.c4_soft.springaddons.security.oidc.starter.synchronised.client.SpringAddonsOidcClientWithLoginBeans
@ConditionalOnWebApplication(type=SERVLET) @Conditional(IsClientWithLoginCondition.class) @EnableWebSecurity @AutoConfiguration @ImportAutoConfiguration(SpringAddonsOidcBeans.class) public class SpringAddonsOidcClientWithLoginBeans extends Object
The following @ConditionalOnMissingBeans are auto-configured
  • springAddonsClientFilterChain: a SecurityFilterChain. Instantiated only if "com.c4-soft.springaddons.oidc.client.security-matchers" property has at least one entry. If defined, it is with highest precedence, to ensure that all routes defined in this security matcher property are intercepted by this filter-chain.
  • oAuth2AuthorizationRequestResolver: a OAuth2AuthorizationRequestResolver. Default instance is a SpringAddonsOAuth2AuthorizationRequestResolver which sets the client hostname in the redirect URI with SpringAddonsOidcClientProperties#client-uri
  • logoutRequestUriBuilder: builder for RP-Initiated Logout queries, taking configuration from properties for OIDC providers which do not strictly comply with the spec: logout URI not provided by OIDC conf or non standard parameter names (Auth0 and Cognito are samples of such OPs)
  • logoutSuccessHandler: a LogoutSuccessHandler. Default instance is a SpringAddonsLogoutSuccessHandler which logs a user out from the last authorization server he logged on.
  • authoritiesConverter: an ClaimSetAuthoritiesConverter. Default instance is a ConfigurableClaimSetAuthoritiesConverter which reads spring-addons SpringAddonsOidcProperties
  • clientAuthorizePostProcessor: a ClientExpressionInterceptUrlRegistryPostProcessor post processor to fine tune access control from java configuration. It applies to all routes not listed in "permit-all" property configuration. Default requires users to be authenticated.
  • clientHttpPostProcessor: a ClientSynchronizedHttpSecurityPostProcessor to override anything from above auto-configuration. It is called just before the security filter-chain is returned. Default is a no-op.
Author:
Jerome Wacongne ch4mp@c4-soft.com

  • Constructor Details

    • SpringAddonsOidcClientWithLoginBeans

      public SpringAddonsOidcClientWithLoginBeans()