Package org.activiti.cloud.services.common.security.config

Class CommonSecurityAutoConfiguration

java.lang.Object

org.activiti.cloud.services.common.security.config.CommonSecurityAutoConfiguration

@AutoConfiguration
@ConditionalOnWebApplication
@ConditionalOnMissingBean({org.springframework.security.web.authentication.session.SessionAuthenticationStrategy.class,org.springframework.security.web.authentication.session.SessionAuthenticationStrategy.class})
@Import(CommonJwtAuthenticationConverterConfiguration.class)
@PropertySource("classpath:config/activiti-cloud-services-common-security.properties")
public class CommonSecurityAutoConfiguration
extends Object

Constructor Summary

Constructors

Constructor	Description
CommonSecurityAutoConfiguration(AuthorizationConfigurer authorizationConfigurer, org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt,org.springframework.security.authentication.AbstractAuthenticationToken> jwtAuthenticationConverter)

Method Summary

Modifier and Type	Method	Description
org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider	authenticatedPrincipalProvider()
ExpiredValidationCheck	expiredValidationCheck()
org.springframework.security.web.SecurityFilterChain	filterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
IsNotBeforeValidationCheck	isNotBeforeValidationCheck()
JtwAccessTokenPrincipalRolesProvider	jtwAccessTokenPrincipalRolesProvider(JwtAccessTokenProvider jwtAccessTokenProvider, JwtAccessTokenValidator jwtAccessTokenValidator)
JwtAccessTokenPrincipalGroupsProvider	jwtAccessTokenPrincipalGroupsProvider(JwtAccessTokenProvider jwtAccessTokenProvider, JwtAccessTokenValidator jwtAccessTokenValidator)
JwtAccessTokenValidator	jwtAccessTokenValidator(List<ValidationCheck> validationChecks)
JwtPrincipalGroupsProviderChain	principalGroupsProviderChain(List<org.activiti.api.runtime.shared.security.PrincipalGroupsProvider> principalGroupsProviders)
org.activiti.api.runtime.shared.security.PrincipalIdentityProvider	principalIdentityProvider(JwtAccessTokenProvider jwtAccessTokenProvider, JwtAccessTokenValidator jwtAccessTokenValidator)
JwtPrincipalRolesProviderChain	principalRolesProviderChain(List<org.activiti.api.runtime.shared.security.PrincipalRolesProvider> principalRolesProviders)
org.activiti.api.runtime.shared.security.SecurityContextTokenProvider	securityContextTokenProvider()
org.activiti.api.runtime.shared.security.SecurityManager	securityManager(org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider authenticatedPrincipalProvider, org.activiti.api.runtime.shared.security.PrincipalIdentityProvider principalIdentityProvider, JwtPrincipalGroupsProviderChain principalGroupsProvider, JwtPrincipalRolesProviderChain principalRolesProviderChain)
protected org.springframework.security.web.authentication.session.SessionAuthenticationStrategy	sessionAuthenticationStrategy()	Defines the session authentication strategy.
feign.RequestInterceptor	tokenRelayRequestInterceptor(org.activiti.api.runtime.shared.security.SecurityContextTokenProvider securityContextTokenProvider)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CommonSecurityAutoConfiguration

@Autowired
public CommonSecurityAutoConfiguration(AuthorizationConfigurer authorizationConfigurer,
 org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt,org.springframework.security.authentication.AbstractAuthenticationToken> jwtAuthenticationConverter)

Method Details

authenticatedPrincipalProvider

@Bean
@ConditionalOnMissingBean
public org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider authenticatedPrincipalProvider()

jwtAccessTokenValidator

@Bean
@ConditionalOnMissingBean
public JwtAccessTokenValidator jwtAccessTokenValidator(List<ValidationCheck> validationChecks)

expiredValidationCheck

@Bean
@ConditionalOnMissingBean
public ExpiredValidationCheck expiredValidationCheck()

isNotBeforeValidationCheck

@Bean
@ConditionalOnMissingBean
public IsNotBeforeValidationCheck isNotBeforeValidationCheck()

principalIdentityProvider

@Bean
@ConditionalOnMissingBean
public org.activiti.api.runtime.shared.security.PrincipalIdentityProvider principalIdentityProvider(JwtAccessTokenProvider jwtAccessTokenProvider,
 JwtAccessTokenValidator jwtAccessTokenValidator)

jwtAccessTokenPrincipalGroupsProvider

@Bean
@Order(-2147483648)
@ConditionalOnMissingBean
public JwtAccessTokenPrincipalGroupsProvider jwtAccessTokenPrincipalGroupsProvider(JwtAccessTokenProvider jwtAccessTokenProvider,
 JwtAccessTokenValidator jwtAccessTokenValidator)

jtwAccessTokenPrincipalRolesProvider

@Bean
@Order(-2147483648)
@ConditionalOnMissingBean
public JtwAccessTokenPrincipalRolesProvider jtwAccessTokenPrincipalRolesProvider(JwtAccessTokenProvider jwtAccessTokenProvider,
 JwtAccessTokenValidator jwtAccessTokenValidator)

principalGroupsProviderChain

@Bean
@ConditionalOnMissingBean
public JwtPrincipalGroupsProviderChain principalGroupsProviderChain(List<org.activiti.api.runtime.shared.security.PrincipalGroupsProvider> principalGroupsProviders)

principalRolesProviderChain

@Bean
@ConditionalOnMissingBean
public JwtPrincipalRolesProviderChain principalRolesProviderChain(List<org.activiti.api.runtime.shared.security.PrincipalRolesProvider> principalRolesProviders)

securityManager

@Bean
@ConditionalOnMissingBean
public org.activiti.api.runtime.shared.security.SecurityManager securityManager(org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider authenticatedPrincipalProvider,
 org.activiti.api.runtime.shared.security.PrincipalIdentityProvider principalIdentityProvider,
 JwtPrincipalGroupsProviderChain principalGroupsProvider,
 JwtPrincipalRolesProviderChain principalRolesProviderChain)

securityContextTokenProvider

@Bean
@ConditionalOnMissingBean
public org.activiti.api.runtime.shared.security.SecurityContextTokenProvider securityContextTokenProvider()

sessionAuthenticationStrategy

@Bean
@ConditionalOnMissingBean
protected org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionAuthenticationStrategy()

Defines the session authentication strategy.

tokenRelayRequestInterceptor

@Bean
@ConditionalOnMissingBean
public feign.RequestInterceptor tokenRelayRequestInterceptor(org.activiti.api.runtime.shared.security.SecurityContextTokenProvider securityContextTokenProvider)

filterChain

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                 throws Exception

Throws:

Exception