- All Implemented Interfaces:
- org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>
@Configuration
@ConditionalOnClass(value={com.sap.cloud.security.xsuaa.XsuaaServiceConfiguration.class,org.springframework.security.config.annotation.web.WebSecurityConfigurer.class,org.springframework.security.oauth2.jwt.Jwt.class})
@Conditional(value=XsuaaConfiguredCondition.class)
@EnableWebSecurity
@Order(value=1000)
public class XsuaaSecurityConfig
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
The default security configuration in case of active XSUAA configuration - which should be the case in productive scenarios.
By default, all requests require an oauth2 authentication - including public endpoints.
In order to open public endpoints, the application needs to create a security configuration with higher priority
and override these endpoints.