Package org.springframework.boot.autoconfigure.security

Class SecurityProperties

java.lang.Object

org.springframework.boot.autoconfigure.security.SecurityProperties

@ConfigurationProperties("spring.security")
public class SecurityProperties
extends Object

Configuration properties for Spring Security.

Since:

1.0.0

Author:

Dave Syer, Andy Wilkinson, Madhura Bhave

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	SecurityProperties.Filter
static class	SecurityProperties.User

Field Summary

Fields

Modifier and Type	Field	Description
static final int	BASIC_AUTH_ORDER	Order applied to the SecurityFilterChain that is used to configure basic authentication for application endpoints.
static final int	DEFAULT_FILTER_ORDER	Default order of Spring Security's Filter in the servlet container (i.e.
static final int	IGNORED_ORDER	Deprecated, for removal: This API element is subject to removal in a future version. since 3.5.0 for removal in 4.0.0 since Spring Security no longer recommends using the .ignoring() method

Constructor Summary

Constructors

Constructor	Description
SecurityProperties()

Method Summary

Modifier and Type	Method	Description
SecurityProperties.Filter	getFilter()
SecurityProperties.User	getUser()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

BASIC_AUTH_ORDER

public static final int BASIC_AUTH_ORDER

Order applied to the SecurityFilterChain that is used to configure basic authentication for application endpoints. Create your own SecurityFilterChain if you want to add your own authentication for all or some of those endpoints.

See Also:

• Constant Field Values

IGNORED_ORDER

@Deprecated(since="3.5.0",
            forRemoval=true)
public static final int IGNORED_ORDER

Deprecated, for removal: This API element is subject to removal in a future version.

since 3.5.0 for removal in 4.0.0 since Spring Security no longer recommends using the .ignoring() method

Order applied to the WebSecurityCustomizer that ignores standard static resource paths.

See Also:

• Constant Field Values

DEFAULT_FILTER_ORDER

public static final int DEFAULT_FILTER_ORDER

Default order of Spring Security's Filter in the servlet container (i.e. amongst other filters registered with the container). There is no connection between this and the @Order on a SecurityFilterChain.

See Also:

• Constant Field Values

Constructor Details

SecurityProperties

public SecurityProperties()

Method Details

getUser

public SecurityProperties.User getUser()

getFilter

public SecurityProperties.Filter getFilter()