Package org.apache.syncope.sra

Class SecurityConfig

  • @EnableWebFluxSecurity
@Configuration(proxyBeanMethods=false)
public class SecurityConfig
extends Object

    • Constructor Summary

      Constructors 
      Constructor Description
      SecurityConfig()  

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.security.web.server.SecurityWebFilterChain actuatorSecurityFilterChain​(org.springframework.security.config.web.server.ServerHttpSecurity http)  
      org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter()  
      org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration​(SRAProperties props)  
      org.springframework.security.oauth2.client.registration.ReactiveClientRegistrationRepository oauth2ClientRegistrationRepository​(org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration)  
      org.springframework.security.oauth2.jwt.ReactiveJwtDecoder oauth2JWTDecoder​(org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration, org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oauth2JWTValidator, org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter)  
      org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oauth2JWTValidator​(SRAProperties props)  
      org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration​(SRAProperties props)  
      org.springframework.security.oauth2.client.registration.ReactiveClientRegistrationRepository oidcClientRegistrationRepository​(org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration)  
      org.springframework.security.oauth2.jwt.ReactiveJwtDecoder oidcJWTDecoder​(org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration, org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oidcJWTValidator, org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter)  
      org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oidcJWTValidator​(SRAProperties props)  
      org.springframework.security.web.server.SecurityWebFilterChain routesSecurityFilterChain​(org.springframework.beans.factory.ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client, SRAProperties props, org.springframework.security.config.web.server.ServerHttpSecurity http, org.springframework.cache.CacheManager cacheManager, LogoutRouteMatcher logoutRouteMatcher, PublicRouteMatcher publicRouteMatcher, CsrfRouteMatcher csrfRouteMatcher, org.springframework.context.ConfigurableApplicationContext ctx)  
      org.pac4j.saml.client.SAML2Client saml2Client​(org.springframework.core.io.support.ResourcePatternResolver resourceResolver, SRAProperties props)  
      org.springframework.security.web.server.SecurityWebFilterChain saml2SecurityFilterChain​(org.springframework.security.config.web.server.ServerHttpSecurity http)  
      org.springframework.security.core.userdetails.ReactiveUserDetailsService userDetailsService​(SRAProperties props)  

    • Constructor Detail

      • SecurityConfig

        public SecurityConfig()

    • Method Detail

      • saml2SecurityFilterChain

        @Bean
@Order(0)
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public org.springframework.security.web.server.SecurityWebFilterChain saml2SecurityFilterChain​(org.springframework.security.config.web.server.ServerHttpSecurity http)

      • actuatorSecurityFilterChain

        @Bean
@Order(1)
public org.springframework.security.web.server.SecurityWebFilterChain actuatorSecurityFilterChain​(org.springframework.security.config.web.server.ServerHttpSecurity http)

      • userDetailsService

        @Bean
public org.springframework.security.core.userdetails.ReactiveUserDetailsService userDetailsService​(SRAProperties props)

      • oidcClientRegistration

        @Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration​(SRAProperties props)

      • oidcClientRegistrationRepository

        @Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public org.springframework.security.oauth2.client.registration.ReactiveClientRegistrationRepository oidcClientRegistrationRepository​(@Qualifier("oidcClientRegistration")
                                                                                                                                     org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration)

      • oidcJWTValidator

        @Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oidcJWTValidator​(SRAProperties props)

      • jwtClaimSetConverter

        @Bean
@ConditionalOnMissingBean
public org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter()

      • oidcJWTDecoder

        @Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public org.springframework.security.oauth2.jwt.ReactiveJwtDecoder oidcJWTDecoder​(@Qualifier("oidcClientRegistration")
                                                                                 org.springframework.security.oauth2.client.registration.ClientRegistration oidcClientRegistration,
                                                                                 @Qualifier("oidcJWTValidator")
                                                                                 org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oidcJWTValidator,
                                                                                 @Qualifier("jwtClaimSetConverter")
                                                                                 org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter)

      • oauth2ClientRegistration

        @Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration​(SRAProperties props)

      • oauth2ClientRegistrationRepository

        @Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public org.springframework.security.oauth2.client.registration.ReactiveClientRegistrationRepository oauth2ClientRegistrationRepository​(@Qualifier("oauth2ClientRegistration")
                                                                                                                                       org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration)

      • oauth2JWTValidator

        @Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oauth2JWTValidator​(SRAProperties props)

      • oauth2JWTDecoder

        @Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public org.springframework.security.oauth2.jwt.ReactiveJwtDecoder oauth2JWTDecoder​(@Qualifier("oauth2ClientRegistration")
                                                                                   org.springframework.security.oauth2.client.registration.ClientRegistration oauth2ClientRegistration,
                                                                                   @Qualifier("oauth2JWTValidator")
                                                                                   org.springframework.security.oauth2.core.OAuth2TokenValidator<org.springframework.security.oauth2.jwt.Jwt> oauth2JWTValidator,
                                                                                   @Qualifier("jwtClaimSetConverter")
                                                                                   org.springframework.core.convert.converter.Converter<Map<String,​Object>,​Map<String,​Object>> jwtClaimSetConverter)

      • saml2Client

        @Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public org.pac4j.saml.client.SAML2Client saml2Client​(org.springframework.core.io.support.ResourcePatternResolver resourceResolver,
                                                     SRAProperties props)

      • routesSecurityFilterChain

        @Bean
@Order(2)
@ConditionalOnProperty(prefix="sra",
                       name="am-type")
public org.springframework.security.web.server.SecurityWebFilterChain routesSecurityFilterChain​(@Qualifier("saml2Client")
                                                                                                org.springframework.beans.factory.ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client,
                                                                                                SRAProperties props,
                                                                                                org.springframework.security.config.web.server.ServerHttpSecurity http,
                                                                                                org.springframework.cache.CacheManager cacheManager,
                                                                                                LogoutRouteMatcher logoutRouteMatcher,
                                                                                                PublicRouteMatcher publicRouteMatcher,
                                                                                                CsrfRouteMatcher csrfRouteMatcher,
                                                                                                org.springframework.context.ConfigurableApplicationContext ctx)