Package org.flowable.ui.common.security

Class FlowableUiSecurityAutoConfiguration.OAuthWebSecurityConfigurerAdapter

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

org.flowable.ui.common.security.FlowableUiSecurityAutoConfiguration.OAuthWebSecurityConfigurerAdapter

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

Enclosing class:

FlowableUiSecurityAutoConfiguration

@Configuration(proxyBeanMethods=false)
@Order(10)
@ConditionalOnProperty(prefix="flowable.common.app.security",
                       name="type",
                       havingValue="oauth2")
public static class FlowableUiSecurityAutoConfiguration.OAuthWebSecurityConfigurerAdapter
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Field Summary

Fields

Modifier and Type	Field	Description
protected FlowableCommonAppProperties	commonAppProperties
protected org.springframework.beans.factory.ObjectProvider<org.springframework.security.crypto.password.PasswordEncoder>	passwordEncoder

Constructor Summary

Constructors

Constructor	Description
OAuthWebSecurityConfigurerAdapter(FlowableCommonAppProperties commonAppProperties, org.springframework.beans.factory.ObjectProvider<org.springframework.security.crypto.password.PasswordEncoder> passwordEncoder)

Method Summary

Modifier and Type	Method	Description
protected void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected String	deducePassword(String password)
ApiHttpSecurityCustomizer	delegatingApiHttpSecurityCustomizer()
ApiHttpSecurityCustomizer	fixUserApiHttpSecurityCustomizer()
org.springframework.security.core.authority.mapping.GrantedAuthoritiesMapper	keycloakAuthoritiesMapper()
CurrentUserProvider	oauth2CurrentUserProvider()

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

commonAppProperties

protected final FlowableCommonAppProperties commonAppProperties

passwordEncoder

protected final org.springframework.beans.factory.ObjectProvider<org.springframework.security.crypto.password.PasswordEncoder> passwordEncoder

Constructor Detail

OAuthWebSecurityConfigurerAdapter

public OAuthWebSecurityConfigurerAdapter(FlowableCommonAppProperties commonAppProperties,
                                         org.springframework.beans.factory.ObjectProvider<org.springframework.security.crypto.password.PasswordEncoder> passwordEncoder)

Method Detail

configure

protected void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                  throws Exception

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

Exception

keycloakAuthoritiesMapper

@Bean
public org.springframework.security.core.authority.mapping.GrantedAuthoritiesMapper keycloakAuthoritiesMapper()

delegatingApiHttpSecurityCustomizer

@Bean
@ConditionalOnClass(org.springframework.security.oauth2.jwt.Jwt.class)
@ConditionalOnMissingBean
public ApiHttpSecurityCustomizer delegatingApiHttpSecurityCustomizer()

fixUserApiHttpSecurityCustomizer

@Bean
@ConditionalOnMissingClass("org.springframework.security.oauth2.jwt.Jwt")
@ConditionalOnMissingBean
public ApiHttpSecurityCustomizer fixUserApiHttpSecurityCustomizer()

oauth2CurrentUserProvider

@Bean
@ConditionalOnMissingBean(name="oauth2CurrentUserProvider")
public CurrentUserProvider oauth2CurrentUserProvider()

deducePassword

protected String deducePassword(String password)