Package org.apache.syncope.sra

Class SecurityConfig

java.lang.Object

org.apache.syncope.sra.SecurityConfig

@EnableWebFluxSecurity
@Configuration(proxyBeanMethods=false)
public class SecurityConfig
extends Object

Constructor Summary

Constructors

Constructor	Description
SecurityConfig()

Method Summary

Modifier and Type	Method	Description
SecurityWebFilterChain	actuatorSecurityFilterChain(ServerHttpSecurity http)
ReactiveUserDetailsService	actuatorUserDetailsService(SRAProperties props)
Converter<Map<String,Object>,Map<String,Object>>	jwtClaimSetConverter()
ClientRegistration	oauth2ClientRegistration(SRAProperties props)
ReactiveClientRegistrationRepository	oauth2ClientRegistrationRepository(ClientRegistration oauth2ClientRegistration)
ReactiveJwtDecoder	oauth2JWTDecoder(ClientRegistration oauth2ClientRegistration, OAuth2TokenValidator<Jwt> oauth2JWTValidator, Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)
OAuth2TokenValidator<Jwt>	oauth2JWTValidator(SRAProperties props)
ClientRegistration	oidcClientRegistration(SRAProperties props)
ReactiveClientRegistrationRepository	oidcClientRegistrationRepository(ClientRegistration oidcClientRegistration)
ReactiveJwtDecoder	oidcJWTDecoder(ClientRegistration oidcClientRegistration, OAuth2TokenValidator<Jwt> oidcJWTValidator, Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)
OAuth2TokenValidator<Jwt>	oidcJWTValidator(SRAProperties props)
SecurityWebFilterChain	routesSecurityFilterChain(ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client, SRAProperties props, ServerHttpSecurity http, CacheManager cacheManager, LogoutRouteMatcher logoutRouteMatcher, PublicRouteMatcher publicRouteMatcher, CsrfRouteMatcher csrfRouteMatcher, ConfigurableApplicationContext ctx)
org.pac4j.saml.client.SAML2Client	saml2Client(ResourcePatternResolver resourceResolver, SRAProperties props)
SecurityWebFilterChain	saml2SecurityFilterChain(ServerHttpSecurity http)
WebFilter	writeableHeaders()	Workaround for https://github.com/spring-projects/spring-framework/issues/33789

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityConfig

public SecurityConfig()

Method Detail

writeableHeaders

@Bean
@Order(-2147483648)
public WebFilter writeableHeaders()

Workaround for https://github.com/spring-projects/spring-framework/issues/33789

Returns:

web filter with writable HTTP headers

saml2SecurityFilterChain

@Bean
@Order(0)
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public SecurityWebFilterChain saml2SecurityFilterChain(ServerHttpSecurity http)

actuatorSecurityFilterChain

@ConditionalOnMissingBean
@Bean
@Order(1)
public SecurityWebFilterChain actuatorSecurityFilterChain(ServerHttpSecurity http)

actuatorUserDetailsService

@ConditionalOnMissingBean
@Bean
public ReactiveUserDetailsService actuatorUserDetailsService(SRAProperties props)

oidcClientRegistration

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ClientRegistration oidcClientRegistration(SRAProperties props)

oidcClientRegistrationRepository

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ReactiveClientRegistrationRepository oidcClientRegistrationRepository(@Qualifier("oidcClientRegistration")
                                                                             ClientRegistration oidcClientRegistration)

oidcJWTValidator

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public OAuth2TokenValidator<Jwt> oidcJWTValidator(SRAProperties props)

jwtClaimSetConverter

@Bean
@ConditionalOnMissingBean
public Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter()

oidcJWTDecoder

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ReactiveJwtDecoder oidcJWTDecoder(@Qualifier("oidcClientRegistration")
                                         ClientRegistration oidcClientRegistration,
                                         @Qualifier("oidcJWTValidator")
                                         OAuth2TokenValidator<Jwt> oidcJWTValidator,
                                         @Qualifier("jwtClaimSetConverter")
                                         Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)

oauth2ClientRegistration

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ClientRegistration oauth2ClientRegistration(SRAProperties props)

oauth2ClientRegistrationRepository

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ReactiveClientRegistrationRepository oauth2ClientRegistrationRepository(@Qualifier("oauth2ClientRegistration")
                                                                               ClientRegistration oauth2ClientRegistration)

oauth2JWTValidator

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public OAuth2TokenValidator<Jwt> oauth2JWTValidator(SRAProperties props)

oauth2JWTDecoder

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ReactiveJwtDecoder oauth2JWTDecoder(@Qualifier("oauth2ClientRegistration")
                                           ClientRegistration oauth2ClientRegistration,
                                           @Qualifier("oauth2JWTValidator")
                                           OAuth2TokenValidator<Jwt> oauth2JWTValidator,
                                           @Qualifier("jwtClaimSetConverter")
                                           Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)

saml2Client

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public org.pac4j.saml.client.SAML2Client saml2Client(ResourcePatternResolver resourceResolver,
                                                     SRAProperties props)

routesSecurityFilterChain

@Bean
@Order(2)
@ConditionalOnProperty(prefix="sra",
                       name="am-type")
public SecurityWebFilterChain routesSecurityFilterChain(@Qualifier("saml2Client")
                                                        ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client,
                                                        SRAProperties props,
                                                        ServerHttpSecurity http,
                                                        CacheManager cacheManager,
                                                        LogoutRouteMatcher logoutRouteMatcher,
                                                        PublicRouteMatcher publicRouteMatcher,
                                                        CsrfRouteMatcher csrfRouteMatcher,
                                                        ConfigurableApplicationContext ctx)