Package mops.config

Class SecurityConfig

  • All Implemented Interfaces:
    org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,​org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>
    @Configuration
@EnableWebSecurity
@ComponentScan(basePackageClasses=org.keycloak.adapters.springsecurity.KeycloakSecurityComponents.class)
public class SecurityConfig
extends org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter
    Security configuration for keycloak.

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  SecurityConfig.MethodSecurityConfig
      Declaring this class enables us to use the Spring specific.

    • Constructor Summary

      Constructors 
      Constructor Description
      SecurityConfig()  

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected void configure​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
      Configures spring security that authentication is required for all resources.
      void configureGlobal​(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
      Configuration for spring security with keycloak.
      org.keycloak.representations.AccessToken getAccessToken()
      allows to @Autowire a Keycloak access token.
      protected org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionAuthenticationStrategy()
      provides a SessionAuthenticationStrategy.

      • Methods inherited from class org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter

        adapterDeploymentContext, authenticationEntryPoint, httpSessionManager, keycloakAuthenticatedActionsRequestFilter, keycloakAuthenticationProcessingFilter, keycloakAuthenticationProvider, keycloakCsrfRequestMatcher, keycloakLogoutHandler, keycloakPreAuthActionsFilter, keycloakSecurityContextRequestFilter

      • Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

        authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

      • Methods inherited from interface org.springframework.security.config.annotation.SecurityConfigurer

        configure, init

    • Constructor Detail

      • SecurityConfig

        public SecurityConfig()

    • Method Detail

      • configureGlobal

        @Autowired
public void configureGlobal​(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
        Configuration for spring security with keycloak.
        Parameters:
        auth - auto injected

      • sessionAuthenticationStrategy

        @Bean
protected org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionAuthenticationStrategy()
        provides a SessionAuthenticationStrategy.
        Specified by:
        sessionAuthenticationStrategy in class org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter
        Returns:
        SessionAuthenticationStrategy

      • getAccessToken

        @Bean
@Scope(scopeName="request",
       proxyMode=TARGET_CLASS)
public org.keycloak.representations.AccessToken getAccessToken()
        allows to @Autowire a Keycloak access token.
        Returns:
        Keycloak access token.

      • configure

        protected void configure​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                  throws java.lang.Exception
        Configures spring security that authentication is required for all resources.
        Overrides:
        configure in class org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter
        Parameters:
        http - auto injected
        Throws:
        java.lang.Exception - on error