Package swiss.trustbroker.oidc

Class OidcSecurityConfiguration

java.lang.Object

swiss.trustbroker.oidc.OidcSecurityConfiguration

@Configuration
@EnableWebSecurity
public class OidcSecurityConfiguration
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
final MetricsService	metricsService

Constructor Summary

Constructors

Constructor

Description

OidcSecurityConfiguration(ClientConfigInMemoryRepository registeredClientRepository, CustomRelyingPartyRegistrationRepository relyingPartyRegistrationRepository, TrustBrokerProperties properties, RelyingPartyDefinitions relyingPartyDefinitions, QoaMappingService qoaMappingService, JwkCacheService jwkCacheService, org.springframework.boot.web.server.autoconfigure.ServerProperties serverProperties, ScriptService scriptService, ClaimsMapperService claimsMapperService, OidcAuditService auditService, SsoService ssoService, org.apache.velocity.app.VelocityEngine velocityEngine, QoaMappingService qoaService, CustomOAuth2AuthorizationService customOAuth2AuthorizationService, MetricsService metricsService)

Method Summary

Modifier and Type	Method	Description
com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext>	jwkSource()	Token signer support based on rotating keys periodically using the oldest valid one first.
org.springframework.security.oauth2.jwt.JwtDecoder	jwtDecoder(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)
org.springframework.security.web.authentication.logout.LogoutSuccessHandler	logoutSuccessHandler()
org.springframework.security.crypto.password.PasswordEncoder	passwordEncoder()	Config secret decoding support.
org.springframework.security.web.SecurityFilterChain	securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
org.springframework.security.oauth2.server.authorization.token.OAuth2TokenCustomizer<org.springframework.security.oauth2.server.authorization.token.JwtEncodingContext>	tokenCustomizer(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)
org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer	webSecurityCustomizer()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

metricsService

public final MetricsService metricsService

Constructor Details

OidcSecurityConfiguration

public OidcSecurityConfiguration(ClientConfigInMemoryRepository registeredClientRepository,
 CustomRelyingPartyRegistrationRepository relyingPartyRegistrationRepository,
 TrustBrokerProperties properties,
 RelyingPartyDefinitions relyingPartyDefinitions,
 QoaMappingService qoaMappingService,
 JwkCacheService jwkCacheService,
 org.springframework.boot.web.server.autoconfigure.ServerProperties serverProperties,
 ScriptService scriptService,
 ClaimsMapperService claimsMapperService,
 OidcAuditService auditService,
 SsoService ssoService,
 org.apache.velocity.app.VelocityEngine velocityEngine,
 QoaMappingService qoaService,
 CustomOAuth2AuthorizationService customOAuth2AuthorizationService,
 MetricsService metricsService)

Method Details

webSecurityCustomizer

@Bean
public org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer webSecurityCustomizer()

securityFilterChain

@Bean
public org.springframework.security.web.SecurityFilterChain securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

passwordEncoder

@Bean
public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()

Config secret decoding support.

Returns:

returns a https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/crypto/password /DelegatingPasswordEncoder.html so you can use any of the variants provided by https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/crypto/factory /PasswordEncoderFactories.html

logoutSuccessHandler

@Bean
public org.springframework.security.web.authentication.logout.LogoutSuccessHandler logoutSuccessHandler()

jwkSource

@Bean
public com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource()

Token signer support based on rotating keys periodically using the oldest valid one first. Keys are retrieved on the /oauth2/jwks or the /realms/id/protocols/openid-connect/certs endpoint.

Returns:

jwtDecoder

@Bean
public org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)

tokenCustomizer

@Bean
public org.springframework.security.oauth2.server.authorization.token.OAuth2TokenCustomizer<org.springframework.security.oauth2.server.authorization.token.JwtEncodingContext> tokenCustomizer(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)