Package org.apache.syncope.core.spring.security
package org.apache.syncope.core.spring.security
-
ClassDescriptionDomain-sensible (via
@Transactional) access to authentication / authorization data.Provides some methods to check whether default credentials are being used, and logs a warning if they are.Generate random passwords according to given policies.Represents the token for an authentication request or for an authenticated principal as JSON Web Token, once the request has been processed by theAuthenticationManager.authenticate(Authentication)method.Processes the JSON Web Token provided asHttpHeaders.AUTHORIZATIONHTTP header, putting the result into theSecurityContextHolder.Enables a generic mechanism for JWT validation and subject resolution which allows to plug in implementations recognizing JWT produced by third parties.JWT authorisation for access tokens issued by Microsoft Entra (formerly Azure) for Microsoft Entra-only applications (v1.0 tokens) cf. https://learn.microsoft.com/en-us/entra/identity-platform/access-tokensRender Spring'sAccessDeniedExceptionas other Syncope errors.Render Spring'sAuthenticationExceptionas other Syncope errors.Default implementation for internal JWT validation.