org.springframework.security.oauth2.config.annotation.web.configurers

Class AuthorizationServerSecurityConfigurer

java.lang.Object

org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

public final class AuthorizationServerSecurityConfigurer
extends org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Since:

2.0

Author:

Rob Winch, Dave Syer

Constructor Summary

Constructors

Constructor and Description
AuthorizationServerSecurityConfigurer()

Method Summary

Methods

Modifier and Type	Method and Description
AuthorizationServerSecurityConfigurer	accessDeniedHandler(org.springframework.security.web.access.AccessDeniedHandler accessDeniedHandler)
void	addTokenEndpointAuthenticationFilter(javax.servlet.Filter filter) Adds a new custom authentication filter for the TokenEndpoint.
AuthorizationServerSecurityConfigurer	allowFormAuthenticationForClients()
AuthorizationServerSecurityConfigurer	authenticationEntryPoint(org.springframework.security.web.AuthenticationEntryPoint authenticationEntryPoint)
AuthorizationServerSecurityConfigurer	checkTokenAccess(String checkTokenAccess)
void	configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
String	getCheckTokenAccess()
String	getTokenKeyAccess()
void	init(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
AuthorizationServerSecurityConfigurer	passwordEncoder(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder)
AuthorizationServerSecurityConfigurer	realm(String realm)
AuthorizationServerSecurityConfigurer	sslOnly()
void	tokenEndpointAuthenticationFilters(List<javax.servlet.Filter> filters) Sets a new list of custom authentication filters for the TokenEndpoint.
AuthorizationServerSecurityConfigurer	tokenKeyAccess(String tokenKeyAccess)

Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter

addObjectPostProcessor, and, getBuilder, postProcess, setBuilder

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationServerSecurityConfigurer

public AuthorizationServerSecurityConfigurer()

Method Detail

sslOnly

public AuthorizationServerSecurityConfigurer sslOnly()

allowFormAuthenticationForClients

public AuthorizationServerSecurityConfigurer allowFormAuthenticationForClients()

realm

public AuthorizationServerSecurityConfigurer realm(String realm)

passwordEncoder

public AuthorizationServerSecurityConfigurer passwordEncoder(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder)

authenticationEntryPoint

public AuthorizationServerSecurityConfigurer authenticationEntryPoint(org.springframework.security.web.AuthenticationEntryPoint authenticationEntryPoint)

accessDeniedHandler

public AuthorizationServerSecurityConfigurer accessDeniedHandler(org.springframework.security.web.access.AccessDeniedHandler accessDeniedHandler)

tokenKeyAccess

public AuthorizationServerSecurityConfigurer tokenKeyAccess(String tokenKeyAccess)

checkTokenAccess

public AuthorizationServerSecurityConfigurer checkTokenAccess(String checkTokenAccess)

getTokenKeyAccess

public String getTokenKeyAccess()

getCheckTokenAccess

public String getCheckTokenAccess()

init

public void init(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
          throws Exception

Specified by:

init in interface org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Overrides:

init in class org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Throws:

Exception

configure

public void configure(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
               throws Exception

Specified by:

configure in interface org.springframework.security.config.annotation.SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Overrides:

configure in class org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,org.springframework.security.config.annotation.web.builders.HttpSecurity>

Throws:

Exception

addTokenEndpointAuthenticationFilter

public void addTokenEndpointAuthenticationFilter(javax.servlet.Filter filter)

Adds a new custom authentication filter for the TokenEndpoint. Filters will be set upstream of the default BasicAuthenticationFilter.

Parameters:

filter -

tokenEndpointAuthenticationFilters

public void tokenEndpointAuthenticationFilters(List<javax.servlet.Filter> filters)

Sets a new list of custom authentication filters for the TokenEndpoint. Filters will be set upstream of the default BasicAuthenticationFilter.

Parameters:

filters - The authentication filters to set.