Class JmixHttpSecurityUtils

java.lang.Object
io.jmix.security.util.JmixHttpSecurityUtils

public class JmixHttpSecurityUtils extends Object
Utility class for Jmix-specific configuration of HttpSecurity.
  • Constructor Summary

    Constructors
    Constructor
    Description
     
  • Method Summary

    Modifier and Type
    Method
    Description
    static void
    configureAnonymous(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
    Configures anonymous access to the application for the given HttpSecurity instance.
    static void
    configureAuthorizedUrls(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
    Deprecated, for removal: This API element is subject to removal in a future version.
    static void
    configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
    Configures frame options to use the same origin.
    static void
    configureRememberMe(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
    Configures default remember me functionality.
    static void
    configureSessionManagement(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
    Configures session management using settings defined in the SessionProperties for the given HttpSecurity instance.

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
  • Constructor Details

    • JmixHttpSecurityUtils

      public JmixHttpSecurityUtils()
  • Method Details

    • configureFrameOptions

      public static void configureFrameOptions(org.springframework.security.config.annotation.web.builders.HttpSecurity http) throws Exception
      Configures frame options to use the same origin.
      Throws:
      Exception
    • configureAnonymous

      public static void configureAnonymous(org.springframework.security.config.annotation.web.builders.HttpSecurity http) throws Exception
      Configures anonymous access to the application for the given HttpSecurity instance. Anonymous user is taken from the UserRepository.getAnonymousUser().
      Throws:
      Exception
    • configureSessionManagement

      public static void configureSessionManagement(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
      Configures session management using settings defined in the SessionProperties for the given HttpSecurity instance.
    • configureRememberMe

      public static void configureRememberMe(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
      Configures default remember me functionality.
    • configureAuthorizedUrls

      @Deprecated(since="2.4", forRemoval=true) public static void configureAuthorizedUrls(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
      Deprecated, for removal: This API element is subject to removal in a future version.
      Configures public and protected access to endpoints using URL patterns returned by instances of the AuthorizedUrlsProvider for the given HttpSecurity instance.