Package org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers

Class OAuth2AuthorizationServerConfigurer

java.lang.Object

org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,B>

org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<OAuth2AuthorizationServerConfigurer,org.springframework.security.config.annotation.web.builders.HttpSecurity>

org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.OAuth2AuthorizationServerConfigurer

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

public final class OAuth2AuthorizationServerConfigurer
extends org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<OAuth2AuthorizationServerConfigurer,org.springframework.security.config.annotation.web.builders.HttpSecurity>

An AbstractHttpConfigurer for OAuth 2.0 Authorization Server support.

Since:

0.0.1

See Also:

• AbstractHttpConfigurer
• OAuth2ClientAuthenticationConfigurer
• OAuth2AuthorizationServerMetadataEndpointConfigurer
• OAuth2AuthorizationEndpointConfigurer
• OAuth2PushedAuthorizationRequestEndpointConfigurer
• OAuth2TokenEndpointConfigurer
• OAuth2TokenIntrospectionEndpointConfigurer
• OAuth2TokenRevocationEndpointConfigurer
• OAuth2DeviceAuthorizationEndpointConfigurer
• OAuth2DeviceVerificationEndpointConfigurer
• OidcConfigurer
• RegisteredClientRepository
• OAuth2AuthorizationService
• OAuth2AuthorizationConsentService
• NimbusJwkSetEndpointFilter

Constructor Summary

Constructors

Constructor	Description
OAuth2AuthorizationServerConfigurer()

Method Summary

Modifier and Type	Method	Description
OAuth2AuthorizationServerConfigurer	authorizationConsentService(OAuth2AuthorizationConsentService authorizationConsentService)	Sets the authorization consent service.
OAuth2AuthorizationServerConfigurer	authorizationEndpoint(org.springframework.security.config.Customizer<OAuth2AuthorizationEndpointConfigurer> authorizationEndpointCustomizer)	Configures the OAuth 2.0 Authorization Endpoint.
static OAuth2AuthorizationServerConfigurer	authorizationServer()	Returns a new instance of OAuth2AuthorizationServerConfigurer for configuring.
OAuth2AuthorizationServerConfigurer	authorizationServerMetadataEndpoint(org.springframework.security.config.Customizer<OAuth2AuthorizationServerMetadataEndpointConfigurer> authorizationServerMetadataEndpointCustomizer)	Configures the OAuth 2.0 Authorization Server Metadata Endpoint.
OAuth2AuthorizationServerConfigurer	authorizationServerSettings(AuthorizationServerSettings authorizationServerSettings)	Sets the authorization server settings.
OAuth2AuthorizationServerConfigurer	authorizationService(OAuth2AuthorizationService authorizationService)	Sets the authorization service.
OAuth2AuthorizationServerConfigurer	clientAuthentication(org.springframework.security.config.Customizer<OAuth2ClientAuthenticationConfigurer> clientAuthenticationCustomizer)	Configures OAuth 2.0 Client Authentication.
void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity)
OAuth2AuthorizationServerConfigurer	deviceAuthorizationEndpoint(org.springframework.security.config.Customizer<OAuth2DeviceAuthorizationEndpointConfigurer> deviceAuthorizationEndpointCustomizer)	Configures the OAuth 2.0 Device Authorization Endpoint.
OAuth2AuthorizationServerConfigurer	deviceVerificationEndpoint(org.springframework.security.config.Customizer<OAuth2DeviceVerificationEndpointConfigurer> deviceVerificationEndpointCustomizer)	Configures the OAuth 2.0 Device Verification Endpoint.
org.springframework.security.web.util.matcher.RequestMatcher	getEndpointsMatcher()	Returns a RequestMatcher for the authorization server endpoints.
void	init(org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity)
OAuth2AuthorizationServerConfigurer	oidc(org.springframework.security.config.Customizer<OidcConfigurer> oidcCustomizer)	Configures OpenID Connect 1.0 support (disabled by default).
OAuth2AuthorizationServerConfigurer	pushedAuthorizationRequestEndpoint(org.springframework.security.config.Customizer<OAuth2PushedAuthorizationRequestEndpointConfigurer> pushedAuthorizationRequestEndpointCustomizer)	Configures the OAuth 2.0 Pushed Authorization Request Endpoint.
OAuth2AuthorizationServerConfigurer	registeredClientRepository(RegisteredClientRepository registeredClientRepository)	Sets the repository of registered clients.
OAuth2AuthorizationServerConfigurer	tokenEndpoint(org.springframework.security.config.Customizer<OAuth2TokenEndpointConfigurer> tokenEndpointCustomizer)	Configures the OAuth 2.0 Token Endpoint.
OAuth2AuthorizationServerConfigurer	tokenGenerator(OAuth2TokenGenerator<? extends org.springframework.security.oauth2.core.OAuth2Token> tokenGenerator)	Sets the token generator.
OAuth2AuthorizationServerConfigurer	tokenIntrospectionEndpoint(org.springframework.security.config.Customizer<OAuth2TokenIntrospectionEndpointConfigurer> tokenIntrospectionEndpointCustomizer)	Configures the OAuth 2.0 Token Introspection Endpoint.
OAuth2AuthorizationServerConfigurer	tokenRevocationEndpoint(org.springframework.security.config.Customizer<OAuth2TokenRevocationEndpointConfigurer> tokenRevocationEndpointCustomizer)	Configures the OAuth 2.0 Token Revocation Endpoint.

Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer

disable, getSecurityContextHolderStrategy, withObjectPostProcessor, withObjectPostProcessor

Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter

addObjectPostProcessor, addObjectPostProcessor, and, getBuilder, postProcess, setBuilder

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OAuth2AuthorizationServerConfigurer

public OAuth2AuthorizationServerConfigurer()

Method Details

authorizationServer

public static OAuth2AuthorizationServerConfigurer authorizationServer()

Returns a new instance of OAuth2AuthorizationServerConfigurer for configuring.

Returns:

a new instance of OAuth2AuthorizationServerConfigurer for configuring

Since:

1.4

registeredClientRepository

public OAuth2AuthorizationServerConfigurer registeredClientRepository(RegisteredClientRepository registeredClientRepository)

Sets the repository of registered clients.

Parameters:

registeredClientRepository - the repository of registered clients

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

authorizationService

public OAuth2AuthorizationServerConfigurer authorizationService(OAuth2AuthorizationService authorizationService)

Sets the authorization service.

Parameters:

authorizationService - the authorization service

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

authorizationConsentService

public OAuth2AuthorizationServerConfigurer authorizationConsentService(OAuth2AuthorizationConsentService authorizationConsentService)

Sets the authorization consent service.

Parameters:

authorizationConsentService - the authorization consent service

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

authorizationServerSettings

public OAuth2AuthorizationServerConfigurer authorizationServerSettings(AuthorizationServerSettings authorizationServerSettings)

Sets the authorization server settings.

Parameters:

authorizationServerSettings - the authorization server settings

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

tokenGenerator

public OAuth2AuthorizationServerConfigurer tokenGenerator(OAuth2TokenGenerator<? extends org.springframework.security.oauth2.core.OAuth2Token> tokenGenerator)

Sets the token generator.

Parameters:

tokenGenerator - the token generator

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

0.2.3

clientAuthentication

public OAuth2AuthorizationServerConfigurer clientAuthentication(org.springframework.security.config.Customizer<OAuth2ClientAuthenticationConfigurer> clientAuthenticationCustomizer)

Configures OAuth 2.0 Client Authentication.

Parameters:

clientAuthenticationCustomizer - the Customizer providing access to the OAuth2ClientAuthenticationConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

authorizationServerMetadataEndpoint

public OAuth2AuthorizationServerConfigurer authorizationServerMetadataEndpoint(org.springframework.security.config.Customizer<OAuth2AuthorizationServerMetadataEndpointConfigurer> authorizationServerMetadataEndpointCustomizer)

Configures the OAuth 2.0 Authorization Server Metadata Endpoint.

Parameters:

authorizationServerMetadataEndpointCustomizer - the Customizer providing access to the OAuth2AuthorizationServerMetadataEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

0.4.0

authorizationEndpoint

public OAuth2AuthorizationServerConfigurer authorizationEndpoint(org.springframework.security.config.Customizer<OAuth2AuthorizationEndpointConfigurer> authorizationEndpointCustomizer)

Configures the OAuth 2.0 Authorization Endpoint.

Parameters:

authorizationEndpointCustomizer - the Customizer providing access to the OAuth2AuthorizationEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

pushedAuthorizationRequestEndpoint

public OAuth2AuthorizationServerConfigurer pushedAuthorizationRequestEndpoint(org.springframework.security.config.Customizer<OAuth2PushedAuthorizationRequestEndpointConfigurer> pushedAuthorizationRequestEndpointCustomizer)

Configures the OAuth 2.0 Pushed Authorization Request Endpoint.

Parameters:

pushedAuthorizationRequestEndpointCustomizer - the Customizer providing access to the OAuth2PushedAuthorizationRequestEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

1.5

tokenEndpoint

public OAuth2AuthorizationServerConfigurer tokenEndpoint(org.springframework.security.config.Customizer<OAuth2TokenEndpointConfigurer> tokenEndpointCustomizer)

Configures the OAuth 2.0 Token Endpoint.

Parameters:

tokenEndpointCustomizer - the Customizer providing access to the OAuth2TokenEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

tokenIntrospectionEndpoint

public OAuth2AuthorizationServerConfigurer tokenIntrospectionEndpoint(org.springframework.security.config.Customizer<OAuth2TokenIntrospectionEndpointConfigurer> tokenIntrospectionEndpointCustomizer)

Configures the OAuth 2.0 Token Introspection Endpoint.

Parameters:

tokenIntrospectionEndpointCustomizer - the Customizer providing access to the OAuth2TokenIntrospectionEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

0.2.3

tokenRevocationEndpoint

public OAuth2AuthorizationServerConfigurer tokenRevocationEndpoint(org.springframework.security.config.Customizer<OAuth2TokenRevocationEndpointConfigurer> tokenRevocationEndpointCustomizer)

Configures the OAuth 2.0 Token Revocation Endpoint.

Parameters:

tokenRevocationEndpointCustomizer - the Customizer providing access to the OAuth2TokenRevocationEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

0.2.2

deviceAuthorizationEndpoint

public OAuth2AuthorizationServerConfigurer deviceAuthorizationEndpoint(org.springframework.security.config.Customizer<OAuth2DeviceAuthorizationEndpointConfigurer> deviceAuthorizationEndpointCustomizer)

Configures the OAuth 2.0 Device Authorization Endpoint.

Parameters:

deviceAuthorizationEndpointCustomizer - the Customizer providing access to the OAuth2DeviceAuthorizationEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

1.1

deviceVerificationEndpoint

public OAuth2AuthorizationServerConfigurer deviceVerificationEndpoint(org.springframework.security.config.Customizer<OAuth2DeviceVerificationEndpointConfigurer> deviceVerificationEndpointCustomizer)

Configures the OAuth 2.0 Device Verification Endpoint.

Parameters:

deviceVerificationEndpointCustomizer - the Customizer providing access to the OAuth2DeviceVerificationEndpointConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

Since:

1.1

oidc

public OAuth2AuthorizationServerConfigurer oidc(org.springframework.security.config.Customizer<OidcConfigurer> oidcCustomizer)

Configures OpenID Connect 1.0 support (disabled by default).

Parameters:

oidcCustomizer - the Customizer providing access to the OidcConfigurer

Returns:

the OAuth2AuthorizationServerConfigurer for further configuration

getEndpointsMatcher

public org.springframework.security.web.util.matcher.RequestMatcher getEndpointsMatcher()

Returns a RequestMatcher for the authorization server endpoints.

Returns:

a RequestMatcher for the authorization server endpoints

init

public void init(org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity)
          throws Exception

Specified by:

init in interface org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Overrides:

init in class org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Throws:

Exception

configure

public void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity)

Specified by:

configure in interface org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Overrides:

configure in class org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>