Class SecurityEnabledBaseConfiguration
java.lang.Object
com.wavemaker.runtime.security.enabled.configuration.SecurityEnabledBaseConfiguration
@Configuration
@EnableWebSecurity
@EnableMethodSecurity
@Conditional(SecurityEnabledCondition.class)
public class SecurityEnabledBaseConfiguration
extends Object
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionorg.springframework.security.web.AuthenticationEntryPointorg.springframework.security.authentication.AuthenticationManagerorg.springframework.security.web.authentication.session.SessionAuthenticationStrategyorg.springframework.security.web.authentication.session.SessionAuthenticationStrategycom.wavemaker.app.security.models.CSRFConfigorg.springframework.security.web.authentication.logout.LogoutHandlerorg.springframework.security.web.util.matcher.RequestMatcherorg.springframework.security.web.csrf.CsrfTokenRepositoryList<com.wavemaker.app.security.models.CustomFilter> org.springframework.session.web.http.CookieSerializerorg.springframework.security.access.expression.SecurityExpressionHandler<org.springframework.security.web.FilterInvocation> org.springframework.security.web.authentication.AuthenticationFailureHandlerorg.springframework.security.web.SecurityFilterChainfilterChainWithSessions(org.springframework.security.config.annotation.web.builders.HttpSecurity http, jakarta.servlet.Filter logoutFilter) org.springframework.security.web.access.intercept.FilterSecurityInterceptorfilterSecurityInterceptor(org.springframework.security.web.SecurityFilterChain filterChainWithSessions) org.springframework.session.web.http.HttpSessionIdResolverorg.springframework.security.config.annotation.web.configuration.WebSecurityCustomizercom.wavemaker.app.security.models.LoginConfigjakarta.servlet.Filterorg.springframework.security.web.authentication.logout.LogoutFilterlogoutFilter(org.springframework.security.web.authentication.logout.LogoutHandler securityContextLogoutHandler, org.springframework.security.web.authentication.logout.LogoutHandler wmCsrfLogoutHandler) org.springframework.security.web.savedrequest.RequestCachecom.wavemaker.app.security.models.RememberMeConfigList<com.wavemaker.app.security.models.Role> roleList()com.wavemaker.app.security.models.RolesConfigorg.springframework.security.web.authentication.logout.LogoutHandlerorg.springframework.security.web.context.SecurityContextRepositoryList<com.wavemaker.app.security.models.SecurityInterceptUrlEntry> prefix should be always lowercase,if it is in camelcase @ConfigurationProperties is unable to read the propertiescom.wavemaker.app.security.models.SessionConcurrencyConfigorg.springframework.security.web.authentication.session.SessionAuthenticationStrategyjakarta.servlet.Filtercom.wavemaker.app.security.models.SessionTimeoutConfigorg.springframework.security.web.authentication.AuthenticationSuccessHandlercom.wavemaker.app.security.models.TokenAuthConfigorg.springframework.security.web.access.AccessDeniedHandlerorg.springframework.security.web.authentication.logout.LogoutSuccessHandlerjakarta.servlet.Filterorg.springframework.security.web.authentication.logout.LogoutHandlerorg.springframework.security.web.authentication.AuthenticationSuccessHandlerorg.springframework.security.web.authentication.AuthenticationSuccessHandlerorg.springframework.security.web.csrf.CsrfTokenRepositoryjakarta.servlet.Filterjakarta.servlet.Filter
-
Constructor Details
-
SecurityEnabledBaseConfiguration
public SecurityEnabledBaseConfiguration()
-
-
Method Details
-
defaultWebSecurityExpressionHandler
@Bean(name="defaultWebSecurityExpressionHandler") public org.springframework.security.access.expression.SecurityExpressionHandler<org.springframework.security.web.FilterInvocation> defaultWebSecurityExpressionHandler() -
authenticationManager
@Bean(name="authenticationManager") public org.springframework.security.authentication.AuthenticationManager authenticationManager() -
defaultCookieSerializer
@Bean(name="defaultCookieSerializer") public org.springframework.session.web.http.CookieSerializer defaultCookieSerializer() -
httpSessionIdResolver
@Bean(name="httpSessionIdResolver") public org.springframework.session.web.http.HttpSessionIdResolver httpSessionIdResolver() -
sessionRepositoryFilter
@Bean(name="sessionRepositoryFilter") public jakarta.servlet.Filter sessionRepositoryFilter() -
wmRequestResponseHolderFiler
@Bean(name="wmRequestResponseHolderFilter") public jakarta.servlet.Filter wmRequestResponseHolderFiler() -
wmCsrfFilter
@Bean(name="wmcsrfFilter") public jakarta.servlet.Filter wmCsrfFilter() -
appAuthenticationEntryPoint
@Bean(name="appAuthenticationEntryPoint") public org.springframework.security.web.AuthenticationEntryPoint appAuthenticationEntryPoint() -
authenticationEntryPointRegistry
@Bean(name="authenticationEntryPointRegistry") public AuthenticationEntryPointRegistry authenticationEntryPointRegistry() -
sessionFixationProtectionStrategy
@Bean(name="sessionFixationProtectionStrategy") public org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionFixationProtectionStrategy() -
csrfAuthenticationStrategy
@Bean(name="csrfAuthenticationStrategy") public org.springframework.security.web.authentication.session.SessionAuthenticationStrategy csrfAuthenticationStrategy() -
compositeSessionAuthenticationStrategy
@Bean(name="compositeSessionAuthenticationStrategy") public org.springframework.security.web.authentication.session.SessionAuthenticationStrategy compositeSessionAuthenticationStrategy() -
wmAppAccessDeniedHandler
@Bean(name="wmAppAccessDeniedHandler") public org.springframework.security.web.access.AccessDeniedHandler wmAppAccessDeniedHandler() -
csrfTokenRepository
@Bean(name="csrfTokenRepository") public org.springframework.security.web.csrf.CsrfTokenRepository csrfTokenRepository() -
csrfConfig
@Bean(name="csrfConfig") public com.wavemaker.app.security.models.CSRFConfig csrfConfig() -
wmHttpSessionCsrfTokenRepository
@Bean(name="wmHttpSessionCsrfTokenRepository") public org.springframework.security.web.csrf.CsrfTokenRepository wmHttpSessionCsrfTokenRepository() -
csrfSecurityRequestMatcher
@Bean(name="csrfSecurityRequestMatcher") public org.springframework.security.web.util.matcher.RequestMatcher csrfSecurityRequestMatcher() -
wmCsrfLogoutHandler
@Bean(name="wmCsrfLogoutHandler") public org.springframework.security.web.authentication.logout.LogoutHandler wmCsrfLogoutHandler() -
csrfLogoutHandler
@Bean(name="csrfLogoutHandler") public org.springframework.security.web.authentication.logout.LogoutHandler csrfLogoutHandler() -
securityContextLogoutHandler
@Bean(name="securityContextLogoutHandler") public org.springframework.security.web.authentication.logout.LogoutHandler securityContextLogoutHandler() -
nullRequestCache
@Bean(name="nullRequestCache") public org.springframework.security.web.savedrequest.RequestCache nullRequestCache() -
wmTokenBasedPreAuthenticatedProcessingFilter
@Bean(name="wmTokenBasedPreAuthenticatedProcessingFilter") public jakarta.servlet.Filter wmTokenBasedPreAuthenticatedProcessingFilter() -
tokenRepository
-
wmTokenBasedAuthenticationService
@Bean(name="wmTokenBasedAuthenticationService") public WMTokenBasedAuthenticationService wmTokenBasedAuthenticationService() -
successHandler
@Bean(name="successHandler") public org.springframework.security.web.authentication.AuthenticationSuccessHandler successHandler() -
wmAuthenticationSuccessRedirectionHandler
@Bean(name="wmAuthenticationSuccessRedirectionHandler") public WMAuthenticationRedirectionHandler wmAuthenticationSuccessRedirectionHandler() -
wmCsrfTokenRepositorySuccessHandler
@Bean(name="wmCsrfTokenRepositorySuccessHandler") public org.springframework.security.web.authentication.AuthenticationSuccessHandler wmCsrfTokenRepositorySuccessHandler() -
wmCsrfTokenResponseWriterAuthenticationSuccessHandler
@Bean(name="wmCsrfTokenResponseWriterAuthenticationSuccessHandler") public org.springframework.security.web.authentication.AuthenticationSuccessHandler wmCsrfTokenResponseWriterAuthenticationSuccessHandler() -
securityContextRepository
@Bean(name="securityContextRepository") public org.springframework.security.web.context.SecurityContextRepository securityContextRepository() -
failureHandler
@Bean(name="failureHandler") public org.springframework.security.web.authentication.AuthenticationFailureHandler failureHandler() -
rememberMeConfig
@Bean(name="rememberMeConfig") public com.wavemaker.app.security.models.RememberMeConfig rememberMeConfig() -
loginConfig
@Bean(name="loginConfig") public com.wavemaker.app.security.models.LoginConfig loginConfig() -
sessionTimeoutConfig
@Bean(name="sessionTimeoutConfig") public com.wavemaker.app.security.models.SessionTimeoutConfig sessionTimeoutConfig() -
sessionConcurrencyConfig
@Bean(name="sessionConcurrencyConfig") public com.wavemaker.app.security.models.SessionConcurrencyConfig sessionConcurrencyConfig() -
tokenAuthConfig
@Bean(name="tokenAuthConfig") public com.wavemaker.app.security.models.TokenAuthConfig tokenAuthConfig() -
loginWebProcessFilter
@Bean(name="loginWebProcessFilter") public jakarta.servlet.Filter loginWebProcessFilter() -
rolesConfig
@Bean(name="rolesConfig") public com.wavemaker.app.security.models.RolesConfig rolesConfig() -
securityInterceptUrlList
@Bean @ConfigurationProperties(prefix="security.intercept-urls") public List<com.wavemaker.app.security.models.SecurityInterceptUrlEntry> securityInterceptUrlList()prefix should be always lowercase,if it is in camelcase @ConfigurationProperties is unable to read the properties -
roleList
@Bean @ConfigurationProperties(prefix="security.app-roles") public List<com.wavemaker.app.security.models.Role> roleList() -
ignoreAntMatchers
@Bean(name="ignoreAntMatchers") public org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer ignoreAntMatchers() -
customFilterList
@Bean @ConfigurationProperties(prefix="security.general.custom-filters") public List<com.wavemaker.app.security.models.CustomFilter> customFilterList() -
filterChainWithSessions
@Bean public org.springframework.security.web.SecurityFilterChain filterChainWithSessions(org.springframework.security.config.annotation.web.builders.HttpSecurity http, jakarta.servlet.Filter logoutFilter) throws Exception - Throws:
Exception
-
filterSecurityInterceptor
@Bean(name="filterSecurityInterceptor") public org.springframework.security.web.access.intercept.FilterSecurityInterceptor filterSecurityInterceptor(org.springframework.security.web.SecurityFilterChain filterChainWithSessions) -
logoutFilter
@Bean(name="logoutFilter") public org.springframework.security.web.authentication.logout.LogoutFilter logoutFilter(org.springframework.security.web.authentication.logout.LogoutHandler securityContextLogoutHandler, org.springframework.security.web.authentication.logout.LogoutHandler wmCsrfLogoutHandler) -
wmApplicationLogoutSuccessHandler
@Bean(name="logoutSuccessHandler") public org.springframework.security.web.authentication.logout.LogoutSuccessHandler wmApplicationLogoutSuccessHandler() -
logoutSuccessHandlerRegistry
@Bean(name="logoutSuccessHandlerRegistry") public LogoutSuccessHandlerRegistry logoutSuccessHandlerRegistry()
-