Package org.apache.syncope.sra

Class SecurityConfig

java.lang.Object

org.apache.syncope.sra.SecurityConfig

@EnableWebFluxSecurity
@Configuration(proxyBeanMethods=false)
public class SecurityConfig
extends Object

Constructor Summary

Constructors

Constructor	Description
SecurityConfig()

Method Summary

Modifier and Type	Method	Description
SecurityWebFilterChain	actuatorSecurityFilterChain(ServerHttpSecurity http)
ReactiveUserDetailsService	actuatorUserDetailsService(SRAProperties props)
Converter<Map<String,Object>,Map<String,Object>>	jwtClaimSetConverter()
ClientRegistration	oauth2ClientRegistration(SRAProperties props)
ReactiveClientRegistrationRepository	oauth2ClientRegistrationRepository(ClientRegistration oauth2ClientRegistration)
ReactiveJwtDecoder	oauth2JWTDecoder(ClientRegistration oauth2ClientRegistration, OAuth2TokenValidator<Jwt> oauth2JWTValidator, Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)
OAuth2TokenValidator<Jwt>	oauth2JWTValidator(SRAProperties props)
ClientRegistration	oidcClientRegistration(SRAProperties props)
ReactiveClientRegistrationRepository	oidcClientRegistrationRepository(ClientRegistration oidcClientRegistration)
ReactiveJwtDecoder	oidcJWTDecoder(ClientRegistration oidcClientRegistration, OAuth2TokenValidator<Jwt> oidcJWTValidator, Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)
OAuth2TokenValidator<Jwt>	oidcJWTValidator(SRAProperties props)
SecurityWebFilterChain	routesSecurityFilterChain(ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client, SRAProperties props, ServerHttpSecurity http, CacheManager cacheManager, LogoutRouteMatcher logoutRouteMatcher, PublicRouteMatcher publicRouteMatcher, CsrfRouteMatcher csrfRouteMatcher, ConfigurableApplicationContext ctx)
org.pac4j.saml.client.SAML2Client	saml2Client(ResourcePatternResolver resourceResolver, SRAProperties props)
SecurityWebFilterChain	saml2SecurityFilterChain(ServerHttpSecurity http)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SecurityConfig

public SecurityConfig()

Method Details

saml2SecurityFilterChain

@Bean
@Order(0)
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public SecurityWebFilterChain saml2SecurityFilterChain(ServerHttpSecurity http)

actuatorSecurityFilterChain

@ConditionalOnMissingBean
@Bean
@Order(1)
public SecurityWebFilterChain actuatorSecurityFilterChain(ServerHttpSecurity http)

actuatorUserDetailsService

@ConditionalOnMissingBean
@Bean
public ReactiveUserDetailsService actuatorUserDetailsService(SRAProperties props)

oidcClientRegistration

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ClientRegistration oidcClientRegistration(SRAProperties props)

oidcClientRegistrationRepository

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ReactiveClientRegistrationRepository oidcClientRegistrationRepository(@Qualifier("oidcClientRegistration")
 ClientRegistration oidcClientRegistration)

oidcJWTValidator

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public OAuth2TokenValidator<Jwt> oidcJWTValidator(SRAProperties props)

jwtClaimSetConverter

@Bean
@ConditionalOnMissingBean
public Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter()

oidcJWTDecoder

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OIDC")
public ReactiveJwtDecoder oidcJWTDecoder(@Qualifier("oidcClientRegistration")
 ClientRegistration oidcClientRegistration,
 @Qualifier("oidcJWTValidator")
 OAuth2TokenValidator<Jwt> oidcJWTValidator,
 @Qualifier("jwtClaimSetConverter")
 Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)

oauth2ClientRegistration

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ClientRegistration oauth2ClientRegistration(SRAProperties props)

oauth2ClientRegistrationRepository

@Bean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ReactiveClientRegistrationRepository oauth2ClientRegistrationRepository(@Qualifier("oauth2ClientRegistration")
 ClientRegistration oauth2ClientRegistration)

oauth2JWTValidator

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public OAuth2TokenValidator<Jwt> oauth2JWTValidator(SRAProperties props)

oauth2JWTDecoder

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="OAUTH2")
public ReactiveJwtDecoder oauth2JWTDecoder(@Qualifier("oauth2ClientRegistration")
 ClientRegistration oauth2ClientRegistration,
 @Qualifier("oauth2JWTValidator")
 OAuth2TokenValidator<Jwt> oauth2JWTValidator,
 @Qualifier("jwtClaimSetConverter")
 Converter<Map<String,Object>,Map<String,Object>> jwtClaimSetConverter)

saml2Client

@Bean
@ConditionalOnMissingBean
@ConditionalOnProperty(prefix="sra",
                       name="am-type",
                       havingValue="SAML2")
public org.pac4j.saml.client.SAML2Client saml2Client(ResourcePatternResolver resourceResolver,
 SRAProperties props)

routesSecurityFilterChain

@Bean
@Order(2)
@ConditionalOnProperty(prefix="sra",
                       name="am-type")
public SecurityWebFilterChain routesSecurityFilterChain(@Qualifier("saml2Client")
 ObjectProvider<org.pac4j.saml.client.SAML2Client> saml2Client,
 SRAProperties props,
 ServerHttpSecurity http,
 CacheManager cacheManager,
 LogoutRouteMatcher logoutRouteMatcher,
 PublicRouteMatcher publicRouteMatcher,
 CsrfRouteMatcher csrfRouteMatcher,
 ConfigurableApplicationContext ctx)