Package io.jmix.autoconfigure.oidc

Class OidcAutoConfiguration.OAuth2ResourceServerConfiguration

java.lang.Object

io.jmix.autoconfigure.oidc.OidcAutoConfiguration.OAuth2ResourceServerConfiguration

Enclosing class:

OidcAutoConfiguration

@EnableWebSecurity
@ConditionalOnProperty(value="jmix.oidc.use-default-jwt-configuration",
                       havingValue="true",
                       matchIfMissing=true)
public static class OidcAutoConfiguration.OAuth2ResourceServerConfiguration
extends Object

Configures API endpoints (e.g. REST API) protection. Invocations to these resources require a bearer token in the request header.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	SECURITY_CONFIGURER_QUALIFIER

Constructor Summary

Constructors

Constructor	Description
OAuth2ResourceServerConfiguration()

Method Summary

Modifier and Type	Method	Description
JmixJwtAuthenticationConverter	jmixJwtAuthenticationConverter(OidcUserMapper oidcUserMapper, OidcProperties oidcProperties)
org.springframework.security.web.SecurityFilterChain	securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http, JmixJwtAuthenticationConverter jmixJwtAuthenticationConverter, org.springframework.context.ApplicationEventPublisher applicationEventPublisher, CompositeResourceServerRequestMatcherProvider securityMatcherProvider)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

SECURITY_CONFIGURER_QUALIFIER

public static final String SECURITY_CONFIGURER_QUALIFIER

See Also:

• Constant Field Values

Constructor Details

OAuth2ResourceServerConfiguration

public OAuth2ResourceServerConfiguration()

Method Details

securityFilterChain

@Bean("oidc_JwtSecurityFilterChain")
@Order(250)
public org.springframework.security.web.SecurityFilterChain securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
 JmixJwtAuthenticationConverter jmixJwtAuthenticationConverter,
 org.springframework.context.ApplicationEventPublisher applicationEventPublisher,
 CompositeResourceServerRequestMatcherProvider securityMatcherProvider)
                                                                         throws Exception

Throws:

Exception

jmixJwtAuthenticationConverter

@Bean
@ConditionalOnMissingBean(JmixJwtAuthenticationConverter.class)
public JmixJwtAuthenticationConverter jmixJwtAuthenticationConverter(OidcUserMapper oidcUserMapper,
 OidcProperties oidcProperties)