本文整理汇总了Java中org.springframework.security.config.annotation.web.builders.HttpSecurity.addFilterAfter方法的典型用法代码示例。如果您正苦于以下问题:Java HttpSecurity.addFilterAfter方法的具体用法?Java HttpSecurity.addFilterAfter怎么用?Java HttpSecurity.addFilterAfter使用的例子?那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类org.springframework.security.config.annotation.web.builders.HttpSecurity
的用法示例。
在下文中一共展示了HttpSecurity.addFilterAfter方法的4个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的Java代码示例。
示例1: configure
import org.springframework.security.config.annotation.web.builders.HttpSecurity; //导入方法依赖的package包/类
@Override
public void configure(HttpSecurity builder) throws Exception {
OAuth2ClientAuthenticationProcessingFilter ssoFilter = this.filter;
ssoFilter.setSessionAuthenticationStrategy(
builder.getSharedObject(SessionAuthenticationStrategy.class));
builder.addFilterAfter(ssoFilter,
AbstractPreAuthenticatedProcessingFilter.class);
}
示例2: configure
import org.springframework.security.config.annotation.web.builders.HttpSecurity; //导入方法依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
final BasicAuthenticationEntryPoint basicAuthenticationEntryPoint = new BasicAuthenticationEntryPoint();
basicAuthenticationEntryPoint.setRealmName(securityProperties.getBasic().getRealm());
basicAuthenticationEntryPoint.afterPropertiesSet();
final Filter oauthFilter = oauthFilter();
final BasicAuthenticationFilter basicAuthenticationFilter = new BasicAuthenticationFilter(
providerManager(), basicAuthenticationEntryPoint);
http.addFilterAfter(oauthFilter, basicAuthenticationFilter.getClass());
http.addFilterBefore(basicAuthenticationFilter, oauthFilter.getClass());
http.addFilterBefore(oAuth2AuthenticationProcessingFilter(), basicAuthenticationFilter.getClass());
this.authorizationProperties.getAuthenticatedPaths().add(dashboard("/**"));
this.authorizationProperties.getAuthenticatedPaths().add(dashboard(""));
ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry security =
http.authorizeRequests()
.antMatchers(this.authorizationProperties.getPermitAllPaths().toArray(new String[0]))
.permitAll()
.antMatchers(this.authorizationProperties.getAuthenticatedPaths().toArray(new String[0]))
.authenticated();
security = SecurityConfigUtils.configureSimpleSecurity(security, this.authorizationProperties);
security.anyRequest().denyAll();
this.securityStateBean.setAuthorizationEnabled(true);
http.httpBasic().and()
.logout()
.logoutSuccessUrl(dashboard("/logout-success-oauth.html"))
.and().csrf().disable()
.exceptionHandling()
.defaultAuthenticationEntryPointFor(basicAuthenticationEntryPoint, new AntPathRequestMatcher("/api/**"))
.defaultAuthenticationEntryPointFor(basicAuthenticationEntryPoint, new AntPathRequestMatcher("/actuator/**"))
.defaultAuthenticationEntryPointFor(
new LoginUrlAuthenticationEntryPoint(this.authorizationProperties.getLoginProcessingUrl()),
AnyRequestMatcher.INSTANCE);
this.securityStateBean.setAuthenticationEnabled(true);
}
示例3: configure
import org.springframework.security.config.annotation.web.builders.HttpSecurity; //导入方法依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
HttpSecurity httpSecurity = http
.requestMatchers()
.antMatchers(urlPatterns())
.and()
.csrf().disable()
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
.exceptionHandling().and()
.headers()
.cacheControl().and()
.frameOptions().disable()
.and()
.authorizeRequests().anyRequest().permitAll().and();
Filter[] filters = primarySchemeFilters();
for (Filter filter : filters) {
httpSecurity = httpSecurity.addFilterBefore(filter, AnonymousAuthenticationFilter.class);
}
httpSecurity = httpSecurity.addFilterBefore(new JwtFilter(), AnonymousAuthenticationFilter.class);
if (bpmEnabled) {
httpSecurity = httpSecurity.addFilterBefore(bpmAuthenticationFilter(), AnonymousAuthenticationFilter.class);
}
httpSecurity.addFilterAfter(new JwtPostFilter(tokenProvider), FilterSecurityInterceptor.class);
}
示例4: configure
import org.springframework.security.config.annotation.web.builders.HttpSecurity; //导入方法依赖的package包/类
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/api/users/**").hasRole("ADMIN")
.antMatchers("/api/session").permitAll()
.antMatchers(HttpMethod.GET).permitAll()
.antMatchers("/api/**").hasRole("BASIC");
http.addFilterAfter(new CsrfTokenResponseHeaderBindingFilter(), CsrfFilter.class);
Logger logger = LoggerFactory.getLogger(getClass());
if (logger.isInfoEnabled()) {
logger.info("设置安全策略");
}
}