Class SecurityConfiguration


  • @Configuration
    @EnableWebSecurity
    @EnableGlobalMethodSecurity(prePostEnabled=true,
                                securedEnabled=true)
    @Import(org.zalando.problem.spring.web.advice.security.SecurityProblemSupport.class)
    @Order(2)
    public class SecurityConfiguration
    extends Object
    • Constructor Detail

      • SecurityConfiguration

        public SecurityConfiguration​(TokenProvider tokenProvider,
                                     org.springframework.web.filter.CorsFilter corsFilter,
                                     org.zalando.problem.spring.web.advice.security.SecurityProblemSupport problemSupport,
                                     DomainUserDetailsService userDetailsService,
                                     @Value("${ca3s.auth.api-key.enabled:false}")
                                     boolean apiKeyEnabled,
                                     @Value("${ca3s.auth.api-key.auth-token-header-name:X-API-KEY}")
                                     String apiKeyRequestHeader,
                                     @Value("${ca3s.auth.api-key.auth-token-admin:}")
                                     String apiKeyAdminValue)
    • Method Detail

      • passwordEncoder

        @Bean
        public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()
      • daoAuthenticationProvider

        @Bean
        public org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()
      • configure

        @Bean
        public org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer configure()
      • filterChain

        @Bean
        public org.springframework.security.web.SecurityFilterChain filterChain​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                         throws Exception
        Throws:
        Exception