Package at.letto.basespringboot.security

Class WebSecurityConfig

java.lang.Object

at.letto.basespringboot.security.WebSecurityConfig

@Configuration
@EnableWebSecurity
public class WebSecurityConfig
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
private org.springframework.context.ApplicationContext	appContext
private static Base64.Decoder	decoder	Dekoder zum Entschlüsseln des JWT-Token-JSONs
private EndpointInterface	endpoint
private JwtAuthenticationTokenFilter	jwtAuthenticationFilter
private JwtAuthenticationProvider	jwtAuthenticationProvider
private JwtAuthenticationEntryPoint	unauthorizedHandler
private BaseLettoUserDetailsService	userInfoService

Constructor Summary

Constructors

Constructor	Description
WebSecurityConfig()

Method Summary

Modifier and Type	Method	Description
boolean	check(Object x, jakarta.servlet.http.HttpServletRequest request, String role)
void	configureAuthentication(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder authenticationManagerBuilder)
org.springframework.security.authentication.AuthenticationProvider	daoAuthenticationProvider()
org.springframework.security.web.SecurityFilterChain	filterChain1(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Root-Pfad und Service-Path für alle frei geben, nicht rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain2(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Service-Pfad für alle frei, nicht rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain3(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	OPEN rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain4(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	API rekursiv mit JWT-Token-Authentifikation
org.springframework.security.web.SecurityFilterChain	filterChain5(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	AUTH rekursiv mit User-Authentifikation
org.springframework.security.web.SecurityFilterChain	filterChain6(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	SESSION rekursiv mit Login-Seite und Authentifkations-Controller
void	init(BaseMicroServiceConfiguration mc, EndpointInterface endpoint)
org.springframework.security.crypto.password.PasswordEncoder	passwordEncoder()
void	setJwtSecret(String jwtSecret, long jwtExpiration)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

unauthorizedHandler

@Autowired
private JwtAuthenticationEntryPoint unauthorizedHandler

jwtAuthenticationProvider

@Autowired
private JwtAuthenticationProvider jwtAuthenticationProvider

jwtAuthenticationFilter

@Autowired
private JwtAuthenticationTokenFilter jwtAuthenticationFilter

userInfoService

@Autowired
private BaseLettoUserDetailsService userInfoService

endpoint

private EndpointInterface endpoint

appContext

@Autowired
private org.springframework.context.ApplicationContext appContext

decoder

private static Base64.Decoder decoder

Dekoder zum Entschlüsseln des JWT-Token-JSONs

Constructor Details

WebSecurityConfig

public WebSecurityConfig()

Method Details

configureAuthentication

@Autowired
public void configureAuthentication(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder authenticationManagerBuilder)

init

public void init(BaseMicroServiceConfiguration mc,
 EndpointInterface endpoint)

setJwtSecret

public void setJwtSecret(String jwtSecret,
 long jwtExpiration)

passwordEncoder

@Bean
public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()

daoAuthenticationProvider

@Bean
public org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()

filterChain1

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain1(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

Root-Pfad und Service-Path für alle frei geben, nicht rekursiv

Throws:

Exception

filterChain2

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain2(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

Service-Pfad für alle frei, nicht rekursiv

Throws:

Exception

filterChain3

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain3(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

OPEN rekursiv

Throws:

Exception

filterChain4

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain4(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

API rekursiv mit JWT-Token-Authentifikation

Throws:

Exception

filterChain5

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain5(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

AUTH rekursiv mit User-Authentifikation

Throws:

Exception

filterChain6

@Bean
public org.springframework.security.web.SecurityFilterChain filterChain6(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

SESSION rekursiv mit Login-Seite und Authentifkations-Controller

Throws:

Exception

check

public boolean check(Object x,
 jakarta.servlet.http.HttpServletRequest request,
 String role)