security.config

类 SecurityConfiguration

java.lang.Object

security.config.SecurityConfiguration

public abstract class SecurityConfiguration
extends Object

安全配置

构造器概要

构造器

构造器和说明
SecurityConfiguration()

方法概要

限定符和类型	方法和说明
org.springframework.security.web.SecurityFilterChain	chain(org.springframework.security.config.annotation.web.builders.HttpSecurity http) 返回过滤链
SecurityConfiguration	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http) 配置
protected void	configure00Before(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 一系列配置之前
protected void	configure01CORS(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置 cors
protected void	configure02Login(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置登入处理
protected void	configure03Logout(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置登出处理
protected void	configure04Exception(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置异常处理
protected void	configure05FunctionPermissions(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置功能权限表
protected void	configure06Anonymous(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置匿名访问清单
protected void	configure07CSRF(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置CSRF
protected void	configure08Frame(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置frame
protected void	configure09BasicAuth(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置BasicAuth
protected void	configure10BearerFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置Bearer token过滤器
protected void	configure11Session(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 配置session选项
protected void	configure99After(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 一系列配置之后
protected void	configureNoSetAuth(org.springframework.security.config.annotation.web.builders.HttpSecurity http, framework.config.SecurityConfig securityConfig) 未设置项的默认授权机制
protected org.springframework.security.web.access.AccessDeniedHandler	loadAccessDeniedHandler(framework.config.SecurityConfig securityConfig) 创建访问拒绝处理器
protected List<String>	loadAnonymousPaths(framework.config.SecurityConfig securityConfig) 加载匿名访问路径表
protected org.springframework.security.web.AuthenticationEntryPoint	loadAuthenticationEntryPoint(framework.config.SecurityConfig securityConfig) 创建授权失败处理器
protected org.springframework.security.web.authentication.AuthenticationFailureHandler	loadAuthenticationFailureHandler(framework.config.SecurityConfig securityConfig) 创建授权失败处理器
protected org.springframework.security.web.authentication.AuthenticationSuccessHandler	loadAuthenticationSuccessHandler(framework.config.SecurityConfig securityConfig) 创建授权失败处理器
protected List<framework.security.FunctionPermission>	loadFunctionPermissionList(framework.config.SecurityConfig securityConfig) 加载功能权限表
protected org.springframework.security.web.authentication.logout.LogoutSuccessHandler	loadLogoutSuccessHandler(framework.config.SecurityConfig securityConfig) 创建登出处理器
protected framework.config.SecurityConfig	loadSecurityConfig() 加载安全配置项
protected javax.servlet.Filter	loadTokenAuthenticationFilter(framework.config.SecurityConfig securityConfig) 加载Token过滤器
protected framework.security.AccountLoader	loadUserLoader(framework.config.SecurityConfig securityConfig) 加载用户加载器
abstract framework.security.AccountLoader	newAccountLoader(framework.config.SecurityConfig securityConfig) 创建新的账号加载服务
framework.security.AuthService	newAuthService(framework.config.SecurityConfig securityConfig) 创建新的授权服务
framework.captcha.Captcha	newCaptcha(org.springframework.cache.CacheManager cacheManager) 创建新验证服务
framework.security.password.PasswordService	newPasswordService(framework.config.SecurityConfig securityConfig) 创建新的密码服务
framework.security.token.AuthTokenBuilder	newTokenBuilder(framework.config.SecurityConfig securityConfig) 创建Token构建器
protected org.springframework.security.config.http.SessionCreationPolicy	sessionPolicy(framework.config.SecurityConfig securityConfig) 启用session时的级别

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

SecurityConfiguration

public SecurityConfiguration()

方法详细资料

newPasswordService

public framework.security.password.PasswordService newPasswordService(framework.config.SecurityConfig securityConfig)

创建新的密码服务

返回:

newTokenBuilder

public framework.security.token.AuthTokenBuilder newTokenBuilder(framework.config.SecurityConfig securityConfig)

创建Token构建器

参数:

securityConfig -

返回:

newAuthService

public framework.security.AuthService newAuthService(framework.config.SecurityConfig securityConfig)

创建新的授权服务

返回:

newAccountLoader

public abstract framework.security.AccountLoader newAccountLoader(framework.config.SecurityConfig securityConfig)

创建新的账号加载服务

返回:

loadAuthenticationFailureHandler

protected org.springframework.security.web.authentication.AuthenticationFailureHandler loadAuthenticationFailureHandler(framework.config.SecurityConfig securityConfig)

创建授权失败处理器

返回:

loadAuthenticationSuccessHandler

protected org.springframework.security.web.authentication.AuthenticationSuccessHandler loadAuthenticationSuccessHandler(framework.config.SecurityConfig securityConfig)

创建授权失败处理器

返回:

loadLogoutSuccessHandler

protected org.springframework.security.web.authentication.logout.LogoutSuccessHandler loadLogoutSuccessHandler(framework.config.SecurityConfig securityConfig)

创建登出处理器

返回:

loadAuthenticationEntryPoint

protected org.springframework.security.web.AuthenticationEntryPoint loadAuthenticationEntryPoint(framework.config.SecurityConfig securityConfig)

创建授权失败处理器

返回:

loadAccessDeniedHandler

protected org.springframework.security.web.access.AccessDeniedHandler loadAccessDeniedHandler(framework.config.SecurityConfig securityConfig)

创建访问拒绝处理器

返回:

newCaptcha

public framework.captcha.Captcha newCaptcha(org.springframework.cache.CacheManager cacheManager)

创建新验证服务

参数:

cacheManager -

返回:

chain

public org.springframework.security.web.SecurityFilterChain chain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                           throws Exception

返回过滤链

参数:

http -

返回:

抛出:

Exception

configure

public SecurityConfiguration configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                throws Exception

配置

参数:

http -

抛出:

Exception

configureNoSetAuth

protected void configureNoSetAuth(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                  framework.config.SecurityConfig securityConfig)
                           throws Exception

未设置项的默认授权机制

参数:

http -

securityConfig -

抛出:

Exception

configure00Before

protected void configure00Before(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                 framework.config.SecurityConfig securityConfig)

一系列配置之前

参数:

http -

securityConfig -

configure99After

protected void configure99After(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                framework.config.SecurityConfig securityConfig)

一系列配置之后

参数:

http -

securityConfig -

configure11Session

protected void configure11Session(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                  framework.config.SecurityConfig securityConfig)
                           throws Exception

配置session选项

参数:

http -

securityConfig -

抛出:

Exception

configure10BearerFilter

protected void configure10BearerFilter(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                       framework.config.SecurityConfig securityConfig)
                                throws Exception

配置Bearer token过滤器

参数:

http -

securityConfig -

抛出:

Exception

configure09BasicAuth

protected void configure09BasicAuth(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                    framework.config.SecurityConfig securityConfig)
                             throws Exception

配置BasicAuth

参数:

http -

securityConfig -

抛出:

Exception

configure08Frame

protected void configure08Frame(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                framework.config.SecurityConfig securityConfig)
                         throws Exception

配置frame

参数:

http -

securityConfig -

抛出:

Exception

configure07CSRF

protected void configure07CSRF(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                               framework.config.SecurityConfig securityConfig)
                        throws Exception

配置CSRF

参数:

http -

securityConfig -

抛出:

Exception

configure06Anonymous

protected void configure06Anonymous(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                    framework.config.SecurityConfig securityConfig)
                             throws Exception

配置匿名访问清单

参数:

http -

securityConfig -

抛出:

Exception

configure04Exception

protected void configure04Exception(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                    framework.config.SecurityConfig securityConfig)
                             throws Exception

配置异常处理

参数:

http -

securityConfig -

抛出:

Exception

configure03Logout

protected void configure03Logout(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                 framework.config.SecurityConfig securityConfig)
                          throws Exception

配置登出处理

参数:

http -

securityConfig -

抛出:

Exception

configure02Login

protected void configure02Login(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                framework.config.SecurityConfig securityConfig)
                         throws Exception

配置登入处理

参数:

http -

securityConfig -

抛出:

Exception

configure01CORS

protected void configure01CORS(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                               framework.config.SecurityConfig securityConfig)
                        throws Exception

配置 cors

参数:

http -

securityConfig -

抛出:

Exception

sessionPolicy

protected org.springframework.security.config.http.SessionCreationPolicy sessionPolicy(framework.config.SecurityConfig securityConfig)

启用session时的级别

参数:

securityConfig -

返回:

configure05FunctionPermissions

protected void configure05FunctionPermissions(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
                                              framework.config.SecurityConfig securityConfig)
                                       throws Exception

配置功能权限表

抛出:

Exception

loadFunctionPermissionList

protected List<framework.security.FunctionPermission> loadFunctionPermissionList(framework.config.SecurityConfig securityConfig)

加载功能权限表

参数:

securityConfig -

返回:

loadAnonymousPaths

protected List<String> loadAnonymousPaths(framework.config.SecurityConfig securityConfig)

加载匿名访问路径表

参数:

securityConfig -

返回:

loadTokenAuthenticationFilter

protected javax.servlet.Filter loadTokenAuthenticationFilter(framework.config.SecurityConfig securityConfig)

加载Token过滤器

参数:

securityConfig -

返回:

loadUserLoader

protected framework.security.AccountLoader loadUserLoader(framework.config.SecurityConfig securityConfig)

加载用户加载器

参数:

securityConfig -

返回:

loadSecurityConfig

protected framework.config.SecurityConfig loadSecurityConfig()

加载安全配置项

返回: