com.sap.cds.framework.spring.config.auth.identity

Class IdentitySecurityConfig

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

com.sap.cds.framework.spring.config.auth.identity.IdentitySecurityConfig

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

@Configuration
 @ConditionalOnClass(value={com.sap.cloud.security.spring.config.IdentityServiceConfiguration.class,org.springframework.security.config.annotation.web.WebSecurityConfigurer.class,org.springframework.security.oauth2.jwt.Jwt.class})
 @Conditional(value=IdentityConfiguredCondition.class)
 @PropertySource(factory=com.sap.cloud.security.spring.config.IdentityServicesPropertySourceFactory.class,
                value="")
 @EnableWebSecurity
 @Order(value=1000)
public class IdentitySecurityConfig
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

The default security configuration in case of active IAS or XSUAA configuration - which should be the case in productive scenarios. By default, all requests require an oauth2 authentication - including public endpoints. In order to open public endpoints, the application needs to create a security configuration with higher priority and override these endpoints.

Constructor Summary

Constructors

Constructor and Description
IdentitySecurityConfig()

Method Summary

Modifier and Type	Method and Description
protected void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdentitySecurityConfig

public IdentitySecurityConfig()

Method Detail

configure

protected void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                  throws Exception

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

Exception