Class WebSecurityConfig

java.lang.Object

at.letto.basespringboot.security.WebSecurityConfig

@Configuration
@EnableWebSecurity
public class WebSecurityConfig
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
private org.springframework.context.ApplicationContext	appContext
private static Base64.Decoder	decoder	Dekoder zum Entschlüsseln des JWT-Token-JSONs
private EndpointInterface	endpoint
private JwtAuthenticationTokenFilter	jwtAuthenticationFilter
private JwtAuthenticationProvider	jwtAuthenticationProvider
private MessageService	messageService
private JwtAuthenticationEntryPoint	unauthorizedHandler
private BaseLettoUserDetailsService	userInfoService

Constructor Summary

Constructors

Constructor	Description
WebSecurityConfig()

Method Summary

Modifier and Type	Method	Description
boolean	check(Object x, jakarta.servlet.http.HttpServletRequest request, String role)
void	configureAuthentication(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder authenticationManagerBuilder)
org.springframework.security.authentication.AuthenticationProvider	daoAuthenticationProvider()
org.springframework.security.web.SecurityFilterChain	filterChain1(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Root-Pfad und Service-Path für alle frei geben, nicht rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain2(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Service-Pfad für alle frei, nicht rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain3(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	OPEN rekursiv
org.springframework.security.web.SecurityFilterChain	filterChain4(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	API rekursiv mit JWT-Token-Authentifikation
org.springframework.security.web.SecurityFilterChain	filterChain5(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	AUTH rekursiv mit User-Authentifikation
org.springframework.security.web.SecurityFilterChain	filterChain6(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	SESSION rekursiv mit Login-Seite und Authentifkations-Controller
void	init(BaseMicroServiceConfiguration mc, EndpointInterface endpoint)
org.springframework.security.crypto.password.PasswordEncoder	passwordEncoder()
private static org.springframework.security.web.servlet.util.matcher.PathPatternRequestMatcher	ppm(String pattern)
void	setJwtSecret(String jwtSecret, long jwtExpiration, BaseMicroServiceConfiguration mc)	Setzt das JWT-Secret und die JWT-Expiration
void	setUseLoginService(boolean useLoginService)	aktiviert den Zugriff auf den Login-Service
void	setUseRedis(boolean useRedis)	aktiviert den Zugriff auf den Redis-Server
void	setUseSecret(boolean useSecret)	aktiviert die direkte Verwendung des Secret um den Token zu entpacken

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

unauthorizedHandler

@Autowired
private JwtAuthenticationEntryPoint unauthorizedHandler

jwtAuthenticationProvider

@Autowired
private JwtAuthenticationProvider jwtAuthenticationProvider

jwtAuthenticationFilter

@Autowired
private JwtAuthenticationTokenFilter jwtAuthenticationFilter

userInfoService

@Autowired
private BaseLettoUserDetailsService userInfoService

messageService

@Autowired
private MessageService messageService

endpoint

private EndpointInterface endpoint

appContext

@Autowired
private org.springframework.context.ApplicationContext appContext

decoder

private static Base64.Decoder decoder

Dekoder zum Entschlüsseln des JWT-Token-JSONs

Constructor Details

WebSecurityConfig

public WebSecurityConfig()

Method Details

configureAuthentication

@Autowired
public void configureAuthentication(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder authenticationManagerBuilder)

init

public void init(BaseMicroServiceConfiguration mc,
 EndpointInterface endpoint)

ppm

private static org.springframework.security.web.servlet.util.matcher.PathPatternRequestMatcher ppm(String pattern)

setJwtSecret

public void setJwtSecret(String jwtSecret,
 long jwtExpiration,
 BaseMicroServiceConfiguration mc)

Setzt das JWT-Secret und die JWT-Expiration

setUseLoginService

public void setUseLoginService(boolean useLoginService)

aktiviert den Zugriff auf den Login-Service

setUseRedis

public void setUseRedis(boolean useRedis)

aktiviert den Zugriff auf den Redis-Server

setUseSecret

public void setUseSecret(boolean useSecret)

aktiviert die direkte Verwendung des Secret um den Token zu entpacken

passwordEncoder

@Bean
public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()

daoAuthenticationProvider

@Bean
public org.springframework.security.authentication.AuthenticationProvider daoAuthenticationProvider()

filterChain1

@Bean
@Order(100)
public org.springframework.security.web.SecurityFilterChain filterChain1(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

Root-Pfad und Service-Path für alle frei geben, nicht rekursiv

Throws:

Exception

filterChain2

@Bean
@Order(110)
public org.springframework.security.web.SecurityFilterChain filterChain2(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

Service-Pfad für alle frei, nicht rekursiv

Throws:

Exception

filterChain3

@Bean
@Order(120)
public org.springframework.security.web.SecurityFilterChain filterChain3(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

OPEN rekursiv

Throws:

Exception

filterChain4

@Bean
@Order(130)
public org.springframework.security.web.SecurityFilterChain filterChain4(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

API rekursiv mit JWT-Token-Authentifikation

Throws:

Exception

filterChain5

@Bean
@Order(140)
public org.springframework.security.web.SecurityFilterChain filterChain5(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

AUTH rekursiv mit User-Authentifikation

Throws:

Exception

filterChain6

@Bean
@Order(150)
public org.springframework.security.web.SecurityFilterChain filterChain6(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                  throws Exception

SESSION rekursiv mit Login-Seite und Authentifkations-Controller

Throws:

Exception

check

public boolean check(Object x,
 jakarta.servlet.http.HttpServletRequest request,
 String role)