Java SecurityProperties类代码示例

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public ResourceServerConfigurer resourceServer(SecurityProperties securityProperties) {
    return new ResourceServerConfigurerAdapter() {
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) {
            resources.resourceId(RESOURCE_ID);
        }

        @Override
        public void configure(HttpSecurity http) throws Exception {
            if (securityProperties.isRequireSsl()) {
                http.requiresChannel().anyRequest().requiresSecure();
            }
            http.authorizeRequests()
                    .antMatchers(HttpMethod.POST, "/patients/**").access(hasScopes("phr.hie_write", "registration.write"))
                    .antMatchers(HttpMethod.GET, "/management/**").access(hasScope("registration.management"))
                    .antMatchers(HttpMethod.POST, "/management/**").access(hasScope("registration.management"))
                    .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
                    .anyRequest().denyAll();
        }
    };
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public ResourceServerConfigurer resourceServer(SecurityProperties securityProperties) {
    return new ResourceServerConfigurerAdapter() {
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) {
            resources.resourceId(RESOURCE_ID);
        }

        @Override
        public void configure(HttpSecurity http) throws Exception {
            if (securityProperties.isRequireSsl()) {
                http.requiresChannel().anyRequest().requiresSecure();
            }
            http.authorizeRequests()
                    // TODO: May add permission for accessing following resource
                    .antMatchers(HttpMethod.POST, "/segmentedDocument/**").permitAll()
                    .antMatchers(HttpMethod.POST, "/validateDocument/**").permitAll()
                    // Security scope for accessing management endpoint
                    .antMatchers(HttpMethod.GET, "/management/**").access(hasScope("dss.management"))
                    .antMatchers(HttpMethod.POST, "/management/**").access(hasScope("dss.management"))
                    .anyRequest().denyAll();
        }
    };
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Override
@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
protected void configure(final HttpSecurity httpSecurity) throws Exception {
    httpSecurity
            .authorizeRequests()
            .antMatchers("/fonts/**").permitAll()
            .antMatchers("/register").permitAll()
            .anyRequest().authenticated()
            .and()
            .formLogin().loginPage("/login").permitAll()
            .and()
            .logout().logoutRequestMatcher(new AntPathRequestMatcher("/logout")).permitAll()
            .and()
            .exceptionHandling().accessDeniedPage("/access?error")
            .and().headers().xssProtection().block(false).xssProtectionEnabled(false).and() // Default setting for Spring Boot to activate XSS Protection (dont fix!)
            .and().csrf().disable(); // FIXME [dh] Enabling CSRF prevents file upload, must be fixed
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public ResourceServerConfigurer resourceServer(SecurityProperties securityProperties) {
    return new ResourceServerConfigurerAdapter() {
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) {
            resources.resourceId(RESOURCE_ID);
        }

        @Override
        public void configure(HttpSecurity http) throws Exception {
            if (securityProperties.isRequireSsl()) {
                http.requiresChannel().anyRequest().requiresSecure();
            }
            http.authorizeRequests()
                    // TODO: May add permission for accessing following resource
                    .antMatchers(HttpMethod.POST, "/policyEnforcement/**").permitAll()
                    // Security scope for accessing management endpoint
                    .antMatchers(HttpMethod.GET, "/management/**").access(hasScope("contextHandler.management"))
                    .antMatchers(HttpMethod.POST, "/management/**").access(hasScope("contextHandler.management"))
                    .anyRequest().denyAll();
        }
    };
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public ResourceServerConfigurer resourceServer(SecurityProperties securityProperties) {
    return new ResourceServerConfigurerAdapter() {
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) {
            resources.resourceId(RESOURCE_ID);
        }

        @Override
        public void configure(HttpSecurity http) throws Exception {
            if (securityProperties.isRequireSsl()) {
                http.requiresChannel().anyRequest().requiresSecure();
            }
            http.authorizeRequests()
                    .antMatchers(HttpMethod.GET, "/management/**").access(hasScope("patientUser.management"))
                    .antMatchers(HttpMethod.POST, "/management/**").access(hasScope("patientUser.management"))
                    .antMatchers(HttpMethod.GET, "/creations/**").access(hasScopes("patientUser.read", "phr.allPatientProfiles_read", "scim.read"))
                    .antMatchers(HttpMethod.POST, "/creations/**").access(hasScopes("patientUser.write", "phr.allPatientProfiles_read", "scim.write"))
                    .antMatchers(HttpMethod.POST, "/scopeAssignments").access(hasScopes("patientUser.scope_assign"))
                    .antMatchers(HttpMethod.POST, "/activations/**").permitAll()
                    .antMatchers(HttpMethod.GET, "/verifications/**").permitAll()
                    .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
                    .anyRequest().denyAll();
        }
    };
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public FilterRegistrationBean<OAuth2ClientContextFilter> oauth2ClientFilterRegistration(
		OAuth2ClientContextFilter filter, SecurityProperties security) {
	FilterRegistrationBean<OAuth2ClientContextFilter> registration = new FilterRegistrationBean<>();
	registration.setFilter(filter);
	registration.setOrder(security.getFilter().getOrder() - 10);
	return registration;
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
public CasHttpSecurityConfigurerAdapter(List<CasSecurityConfigurer> configurers,
        SecurityProperties securityProperties, CasSecurityProperties casSecurityProperties,
        CasAuthenticationEntryPoint authenticationEntryPoint, ServiceProperties serviceProperties,
        TicketValidator ticketValidator, ObjectPostProcessor<Object> objectPostProcessor) {
    this.configurers = configurers;
    this.securityProperties = securityProperties;
    this.casSecurityProperties = casSecurityProperties;
    this.authenticationEntryPoint = authenticationEntryPoint;
    this.serviceProperties = serviceProperties;
    this.ticketValidator = ticketValidator;
    authenticationManagerBuilder = new AuthenticationManagerBuilder(objectPostProcessor);
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
public DefaultCasSecurityConfigurerAdapter(SecurityProperties securityProperties,
        CasSecurityProperties casSecurityProperties,
        AbstractCasAssertionUserDetailsService userDetailsService,
        ServiceAuthenticationDetailsSource authenticationDetailsSource,
        ProxyGrantingTicketStorage proxyGrantingTicketStorage) {
    this.securityProperties = securityProperties;
    this.casSecurityProperties = casSecurityProperties;
    this.userDetailsService = userDetailsService;
    this.authenticationDetailsSource = authenticationDetailsSource;
    this.proxyGrantingTicketStorage = proxyGrantingTicketStorage;
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
public SecurityConfiguration(SecurityProperties security,
                             JwtSecurityProperties jwtSecurityProperties,
                             PasswordEncoder passwordEncoder,
                             UserDetailsService userDetailsService,
                             TokenProvider tokenProvider) {
  this.security = security;
  this.jwtSecurityProperties = jwtSecurityProperties;
  this.passwordEncoder = passwordEncoder;
  this.userDetailsService = userDetailsService;
  this.tokenProvider = tokenProvider;
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
/**
 * Checks whether beans are registered after auto configuration class has been registered
 */
@Test
public void registerJwtAutoConfiguration() {
  this.context.register(SecurityProperties.class);
  this.context.register(JwtAutoConfiguration.class);
  this.context.refresh();

  //assert
  this.context.getBean(TokenProvider.class);
  this.context.getBean(PasswordEncoder.class);
  this.context.getBean(UserDetailsService.class);
  this.context.getBean(SecurityEvaluationContextExtension.class);
  this.context.getBean(WebSecurityConfigurerAdapter.class);
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
/**
 * Expects not to have {@link WebSecurityConfigurerAdapter} in context if property is set to false
 */
@Test(expected = NoSuchBeanDefinitionException.class)
public void propertyAutoSecurityDisabled() {
  this.context.register(SecurityProperties.class);
  this.context.register(JwtAutoConfiguration.class);
  EnvironmentTestUtils.addEnvironment(this.context, "com.github.cobrijani.jwt.enabled:false");
  this.context.refresh();

  //assert
  this.context.getBean(WebSecurityConfigurerAdapter.class);
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Override
@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
protected void configure(HttpSecurity http) throws Exception {
    // @formatter:off
    http.formLogin().and().antMatcher("/**").authorizeRequests().antMatchers("/", "/login**", "/img/**", "/webjars/**").permitAll().anyRequest()
            .authenticated().and().exceptionHandling()
            .authenticationEntryPoint(new LoginUrlAuthenticationEntryPoint("/")).and().logout()
            .logoutSuccessUrl("/").permitAll().and().csrf()
            .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()).and()
            .addFilterBefore(ssoFilter(), BasicAuthenticationFilter.class);
    // @formatter:on
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public ResourceServerConfigurer resourceServer(SecurityProperties securityProperties) {
    return new ResourceServerConfigurerAdapter() {
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) {
            resources.resourceId(RESOURCE_ID);
        }

        @Override
        public void configure(HttpSecurity http) throws Exception {
            if (securityProperties.isRequireSsl()) {
                http.requiresChannel().anyRequest().requiresSecure();
            }
            http.authorizeRequests()
                    .antMatchers(HttpMethod.GET, "/management/**").access(hasScope("pcm.management"))
                    .antMatchers(HttpMethod.POST, "/management/**").access(hasScope("pcm.management"))
                    // FIXME (#27): Change following method to protect new attest consent endpoint
                    .antMatchers(HttpMethod.GET, "/patients/consents/signConsent/**").access(hasScope("pcm.consent_sign"))
                    // FIXME (#28): Change following method to protect new attest consent revocation endpoint
                    .antMatchers(HttpMethod.GET, "/patients/consents/revokeConsent/**").access(hasScope("pcm.consent_revoke"))
                    .antMatchers(HttpMethod.GET, "/patients/providers/**").access(hasScope("pcm.provider_read"))
                    .antMatchers(HttpMethod.POST, "/patients/providers/**").access(hasScope("pcm.provider_create"))
                    .antMatchers(HttpMethod.DELETE, "/patients/providers/**").access(hasScope("pcm.provider_delete"))
                    .antMatchers(HttpMethod.GET, "/patients/consents/**").access(hasScope("pcm.consent_read"))
                    .antMatchers(HttpMethod.POST, "/patients/consents/**").access(hasScope("pcm.consent_create"))
                    .antMatchers(HttpMethod.PUT, "/patients/consents/**").access(hasScope("pcm.consent_update"))
                    .antMatchers(HttpMethod.DELETE, "/patients/consents/**").access(hasScope("pcm.consent_delete"))
                    .antMatchers(HttpMethod.GET, "/patients/activities/**").access(hasScope("pcm.activity_read"))
                    .antMatchers(HttpMethod.GET, "/patients/clinicaldocuments/**").access(hasScope("pcm.clinicalDocument_read"))
                    .antMatchers(HttpMethod.POST, "/patients/clinicaldocuments/**").access(hasScope("pcm.clinicalDocument_create"))
                    .antMatchers(HttpMethod.DELETE, "/patients/clinicaldocuments/**").access(hasScope("pcm.clinicalDocument_delete"))
                    .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
                    .antMatchers(HttpMethod.GET, "/patients/purposeOfUse", "/patients/medicalSection", "/patients/sensitivityPolicy").authenticated()
                    // TODO (#29)(BU): remove this permission after VSS is separated
                    .antMatchers(HttpMethod.GET, "/lookupService/**").permitAll()
                    .antMatchers(HttpMethod.POST, "/lookupService/**").permitAll()
                    .anyRequest().denyAll();
        }
    };
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
public ManagementWebSecurityConfigurerAdapter(SecurityProperties security,
		ManagementServerProperties management,
		ObjectProvider<ManagementContextResolver> contextResolverProvider) {
	this.security = security;
	this.management = management;
	this.contextResolver = contextResolverProvider.getIfAvailable();
}
 

import org.springframework.boot.autoconfigure.security.SecurityProperties; //导入依赖的package包/类
@Bean
public FilterRegistrationBean oauth2ClientFilterRegistration(
		OAuth2ClientContextFilter filter, SecurityProperties security) {
	FilterRegistrationBean registration = new FilterRegistrationBean();
	registration.setFilter(filter);
	registration.setOrder(security.getFilterOrder() - 10);
	return registration;
}