Class CommonSecurityAutoConfiguration

  • All Implemented Interfaces:
    org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,​org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

    @Configuration
    @ConditionalOnWebApplication
    @ConditionalOnMissingBean({org.springframework.security.web.authentication.session.SessionAuthenticationStrategy.class,org.springframework.security.web.authentication.session.SessionAuthenticationStrategy.class})
    @Import(CommonJwtAuthenticationConverterConfiguration.class)
    public class CommonSecurityAutoConfiguration
    extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
    • Constructor Detail

      • CommonSecurityAutoConfiguration

        @Autowired
        public CommonSecurityAutoConfiguration​(AuthorizationConfigurer authorizationConfigurer,
                                               org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt,​org.springframework.security.authentication.AbstractAuthenticationToken> jwtAuthenticationConverter)
    • Method Detail

      • authenticatedPrincipalProvider

        @Bean
        @ConditionalOnMissingBean
        public org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider authenticatedPrincipalProvider()
      • jwtAccessTokenValidator

        @Bean
        @ConditionalOnMissingBean
        public JwtAccessTokenValidator jwtAccessTokenValidator()
      • principalIdentityProvider

        @Bean
        @ConditionalOnMissingBean
        public org.activiti.api.runtime.shared.security.PrincipalIdentityProvider principalIdentityProvider​(JwtAccessTokenProvider jwtAccessTokenProvider,
                                                                                                            JwtAccessTokenValidator jwtAccessTokenValidator)
      • principalGroupsProviderChain

        @Bean
        @ConditionalOnMissingBean
        public JwtPrincipalGroupsProviderChain principalGroupsProviderChain​(List<org.activiti.api.runtime.shared.security.PrincipalGroupsProvider> principalGroupsProviders)
      • principalRolesProviderChain

        @Bean
        @ConditionalOnMissingBean
        public JwtPrincipalRolesProviderChain principalRolesProviderChain​(List<org.activiti.api.runtime.shared.security.PrincipalRolesProvider> principalRolesProviders)
      • securityManager

        @Bean
        @ConditionalOnMissingBean
        public org.activiti.api.runtime.shared.security.SecurityManager securityManager​(org.activiti.api.runtime.shared.security.SecurityContextPrincipalProvider authenticatedPrincipalProvider,
                                                                                        org.activiti.api.runtime.shared.security.PrincipalIdentityProvider principalIdentityProvider,
                                                                                        JwtPrincipalGroupsProviderChain principalGroupsProvider,
                                                                                        JwtPrincipalRolesProviderChain principalRolesProviderChain)
      • securityContextTokenProvider

        @Bean
        @ConditionalOnMissingBean
        public org.activiti.api.runtime.shared.security.SecurityContextTokenProvider securityContextTokenProvider()
      • sessionAuthenticationStrategy

        @Bean
        @ConditionalOnMissingBean
        protected org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionAuthenticationStrategy()
        Defines the session authentication strategy.
      • tokenRelayRequestInterceptor

        @Bean
        @ConditionalOnMissingBean
        public feign.RequestInterceptor tokenRelayRequestInterceptor​(org.activiti.api.runtime.shared.security.SecurityContextTokenProvider securityContextTokenProvider)
      • configure

        protected void configure​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                          throws Exception
        Overrides:
        configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
        Throws:
        Exception
      • cacheManager

        @Bean
        @ConditionalOnMissingBean
        public org.springframework.cache.CacheManager cacheManager​(Collection<org.springframework.cache.Cache> caches)