Package io.jmix.autoconfigure.oidc

Class OidcAutoConfiguration

java.lang.Object

io.jmix.autoconfigure.oidc.OidcAutoConfiguration

@AutoConfiguration(afterName="org.springframework.boot.security.oauth2.client.autoconfigure.OAuth2ClientAutoConfiguration",
                   beforeName="io.jmix.autoconfigure.securityflowui.SecurityFlowuiAutoConfiguration")
@Import(OidcConfiguration.class)
@ConditionalOnProperty(name="jmix.oidc.use-default-configuration",
                       matchIfMissing=true)
public class OidcAutoConfiguration
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	OidcAutoConfiguration.DefaultOidcVaadinWebSecurity	Configures FlowUI views protection together with OIDC login.
static class	OidcAutoConfiguration.OAuth2ResourceServerConfiguration	Configures API endpoints (e.g.
static class	OidcAutoConfiguration.OidcResourceServerJwtDecoderConfiguration	Customizes the JwtDecoder auto-configured by Spring Boot for the OAuth2 resource server: the JWK Set is loaded with timeouts taken from jmix.oidc.jwks.* properties instead of the non-configurable 500 ms Spring Security defaults.

Constructor Summary

Constructors

Constructor	Description
OidcAutoConfiguration()

Method Summary

Modifier and Type	Method	Description
ClaimsRolesMapper	claimsRoleMapper(ResourceRoleRepository resourceRoleRepository, RowLevelRoleRepository rowLevelRoleRepository, OidcProperties oidcProperties, RoleGrantedAuthorityUtils roleGrantedAuthorityUtils)
org.springframework.security.oauth2.jwt.JwtDecoderFactory<org.springframework.security.oauth2.client.registration.ClientRegistration>	oidcIdTokenDecoderFactory(OidcProperties oidcProperties)	Verifies ID token signatures during OIDC login.
JmixOidcUserService	oidcUserService(OidcUserMapper<? extends JmixOidcUser> oidcUserMapper)
OidcUserMapper	userMapper(ClaimsRolesMapper claimsRolesMapper)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OidcAutoConfiguration

public OidcAutoConfiguration()

Method Details

oidcUserService

@Bean
@ConditionalOnMissingBean(JmixOidcUserService.class)
public JmixOidcUserService oidcUserService(OidcUserMapper<? extends JmixOidcUser> oidcUserMapper)

claimsRoleMapper

@Bean
@ConditionalOnMissingBean(ClaimsRolesMapper.class)
@ConditionalOnBean(ResourceRoleRepository.class)
public ClaimsRolesMapper claimsRoleMapper(ResourceRoleRepository resourceRoleRepository,
 RowLevelRoleRepository rowLevelRoleRepository,
 OidcProperties oidcProperties,
 RoleGrantedAuthorityUtils roleGrantedAuthorityUtils)

userMapper

@Bean
@ConditionalOnMissingBean(OidcUserMapper.class)
public OidcUserMapper userMapper(ClaimsRolesMapper claimsRolesMapper)

oidcIdTokenDecoderFactory

@Bean
@ConditionalOnMissingBean(org.springframework.security.oauth2.jwt.JwtDecoderFactory.class)
public org.springframework.security.oauth2.jwt.JwtDecoderFactory<org.springframework.security.oauth2.client.registration.ClientRegistration> oidcIdTokenDecoderFactory(OidcProperties oidcProperties)

Verifies ID token signatures during OIDC login. Since Spring Security 7 the standard OidcIdTokenDecoderFactory loads the JWK Set with non-configurable 500 ms timeouts, which is often not enough for a remote provider, so a factory with timeouts taken from jmix.oidc.jwks.* properties is provided instead.