Package io.camunda.optimize.rest.security.cloud

Class CCSaaSSecurityConfigurerAdapter

java.lang.Object

io.camunda.optimize.rest.security.AbstractSecurityConfigurerAdapter

io.camunda.optimize.rest.security.cloud.CCSaaSSecurityConfigurerAdapter

@Configuration
@EnableWebSecurity
@Conditional(io.camunda.optimize.service.util.configuration.condition.CCSaaSCondition.class)
public class CCSaaSSecurityConfigurerAdapter
extends AbstractSecurityConfigurerAdapter

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
class	CCSaaSSecurityConfigurerAdapter.AddClusterIdSubPathToRedirectAuthenticationEntryPoint	In Camunda Cloud environments all apps are served under a sub-path but there is no reverse proxy in place.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CAMUNDA_CLUSTER_ID_CLAIM_NAME

Fields inherited from class io.camunda.optimize.rest.security.AbstractSecurityConfigurerAdapter

authCookieService, configurationService, DEEP_SUB_PATH_ANY, preAuthenticatedAuthenticationProvider, PUBLIC_API_PATH, sessionService

Constructor Summary

Constructors

Constructor

Description

CCSaaSSecurityConfigurerAdapter(ConfigurationService configurationService, CustomPreAuthenticatedAuthenticationProvider preAuthenticatedAuthenticationProvider, SessionService sessionService, AuthCookieService authCookieService, org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository, org.springframework.security.oauth2.client.OAuth2AuthorizedClientService oAuth2AuthorizedClientService)

Method Summary

Modifier and Type	Method	Description
AuthenticationCookieFilter	authenticationCookieFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.web.SecurityFilterChain	configurePublicApi(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
protected org.springframework.security.web.SecurityFilterChain	configureWebSecurity(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
HttpCookieOAuth2AuthorizationRequestRepository	cookieOAuth2AuthorizationRequestRepository()
protected org.springframework.security.oauth2.jwt.JwtDecoder	publicApiJwtDecoder()

Methods inherited from class io.camunda.optimize.rest.security.AbstractSecurityConfigurerAdapter

applyPublicApiOptions, configureGenericSecurityOptions, createApiPath

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CAMUNDA_CLUSTER_ID_CLAIM_NAME

public static final String CAMUNDA_CLUSTER_ID_CLAIM_NAME

See Also:

• Constant Field Values

Constructor Details

CCSaaSSecurityConfigurerAdapter

public CCSaaSSecurityConfigurerAdapter(ConfigurationService configurationService,
 CustomPreAuthenticatedAuthenticationProvider preAuthenticatedAuthenticationProvider,
 SessionService sessionService,
 AuthCookieService authCookieService,
 org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository,
 org.springframework.security.oauth2.client.OAuth2AuthorizedClientService oAuth2AuthorizedClientService)

Method Details

authenticationCookieFilter

@Bean
public AuthenticationCookieFilter authenticationCookieFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                      throws Exception

Throws:

Exception

configurePublicApi

@Bean
@Order(1)
protected org.springframework.security.web.SecurityFilterChain configurePublicApi(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

configureWebSecurity

@Bean
@Order(2)
protected org.springframework.security.web.SecurityFilterChain configureWebSecurity(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

cookieOAuth2AuthorizationRequestRepository

@Bean
public HttpCookieOAuth2AuthorizationRequestRepository cookieOAuth2AuthorizationRequestRepository()

publicApiJwtDecoder

protected org.springframework.security.oauth2.jwt.JwtDecoder publicApiJwtDecoder()

Specified by:

publicApiJwtDecoder in class AbstractSecurityConfigurerAdapter