com.yishuifengxiao.common.security.autoconfigure

Class SecurityAuthorizeProviderAutoConfiguration

java.lang.Object

com.yishuifengxiao.common.security.autoconfigure.SecurityAuthorizeProviderAutoConfiguration

@Configuration
 @ConditionalOnBean(value=AbstractSecurityConfig.class)
 @ConditionalOnClass(value={org.springframework.security.authentication.DefaultAuthenticationEventPublisher.class,org.springframework.security.config.annotation.web.configuration.EnableWebSecurity.class,org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter.class})
 @ConditionalOnProperty(prefix="yishuifengxiao.security",
                       name="enable",
                       havingValue="true",
                       matchIfMissing=true)
public class SecurityAuthorizeProviderAutoConfiguration
extends Object

配置spring security 授权提供器

Since:

1.0.0

Version:

1.0.0

Author:

yishui

Constructor Summary

Constructors

Constructor and Description
SecurityAuthorizeProviderAutoConfiguration()

Method Summary

Modifier and Type	Method and Description
AuthorizeProvider	corsAuthorizeProvider() 跨域处理授权提供器
AuthorizeProvider	csrfAuthorizeProvider() CSRF处理授权提供器
CustomResourceProvider	customAuthority() 注入一个名为 customAuthority 授权行为实体
AuthorizeProvider	customAuthorizeProvider(CustomResourceProvider customAuthority) 自定义授权提供器
AuthorizeProvider	exceptionAuthorizeProvider(org.springframework.security.web.AuthenticationEntryPoint exceptionAuthenticationEntryPoint, org.springframework.security.web.access.AccessDeniedHandler customAccessDeniedHandler) 异常处理授权提供器
AuthorizeProvider	formLoginProvider(org.springframework.security.web.authentication.AuthenticationSuccessHandler authenticationSuccessHandler, org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler) 表单登陆授权管理
AuthorizeProvider	httpBasicAuthorizeProvider(org.springframework.security.web.AuthenticationEntryPoint exceptionAuthenticationEntryPoint) Basic登陆授权提供器
AuthorizeProvider	interceptAllProvider() 拦截所有资源
AuthorizeProvider	loginOutProvider(org.springframework.security.web.authentication.logout.LogoutSuccessHandler logoutSuccessHandler) 退出授权管理
AuthorizeProvider	permitAllConfigProvider() 放行通过授权管理
AuthorizeProvider	remeberMeProvider(org.springframework.security.web.authentication.rememberme.PersistentTokenRepository persistentTokenRepository, org.springframework.security.core.userdetails.UserDetailsService userDetailsService) 记住我授权管理
AuthorizeProvider	sessionProvider(org.springframework.security.web.session.SessionInformationExpiredStrategy sessionInformationExpiredStrategy, org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler) session授权管理

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityAuthorizeProviderAutoConfiguration

public SecurityAuthorizeProviderAutoConfiguration()

Method Detail

customAuthority

@Bean(value="customAuthority")
 @ConditionalOnMissingBean(name="customAuthority")
public CustomResourceProvider customAuthority()

注入一个名为 customAuthority 授权行为实体

Returns:

自定义授权提供器

customAuthorizeProvider

@Bean(value="customAuthorizeProvider")
 @ConditionalOnMissingBean(name="customAuthorizeProvider")
public AuthorizeProvider customAuthorizeProvider(@Qualifier(value="customAuthority")
                                                                                                                                                   CustomResourceProvider customAuthority)

自定义授权提供器

Parameters:

customAuthority - 自定义授权提供器

Returns:

授权提供器实例

formLoginProvider

@Bean(value="formLoginProvider")
 @ConditionalOnMissingBean(name="formLoginProvider")
public AuthorizeProvider formLoginProvider(org.springframework.security.web.authentication.AuthenticationSuccessHandler authenticationSuccessHandler,
                                                                                                                                 org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler)

表单登陆授权管理

Parameters:

authenticationSuccessHandler - 登陆成功处理器

authenticationFailureHandler - 登陆失败处理器

Returns:

授权提供器 实例

interceptAllProvider

@Bean(value="interceptAllProvider")
 @ConditionalOnMissingBean(name="interceptAllProvider")
public AuthorizeProvider interceptAllProvider()

拦截所有资源

Returns:

授权提供器 实例

loginOutProvider

@Bean(value="loginOutProvider")
 @ConditionalOnMissingBean(name="loginOutProvider")
public AuthorizeProvider loginOutProvider(org.springframework.security.web.authentication.logout.LogoutSuccessHandler logoutSuccessHandler)

退出授权管理

Parameters:

logoutSuccessHandler - 退出成功管理

Returns:

授权提供器 实例

remeberMeProvider

@Bean(value="remeberMeProvider")
 @ConditionalOnMissingBean(name="remeberMeProvider")
public AuthorizeProvider remeberMeProvider(org.springframework.security.web.authentication.rememberme.PersistentTokenRepository persistentTokenRepository,
                                                                                                                                 org.springframework.security.core.userdetails.UserDetailsService userDetailsService)

记住我授权管理

Parameters:

persistentTokenRepository - token存储器

userDetailsService - 用户认证处理器

Returns:

授权提供器 实例

sessionProvider

@Bean(value="sessionProvider")
 @ConditionalOnMissingBean(name="sessionProvider")
public AuthorizeProvider sessionProvider(org.springframework.security.web.session.SessionInformationExpiredStrategy sessionInformationExpiredStrategy,
                                                                                                                           org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler)

session授权管理

Parameters:

sessionInformationExpiredStrategy - session失效策略

authenticationFailureHandler - 认证失败处理器

Returns:

授权提供器 实例

permitAllConfigProvider

@Bean(value="permitAllProvider")
 @ConditionalOnMissingBean(name="permitAllProvider")
public AuthorizeProvider permitAllConfigProvider()

放行通过授权管理

Returns:

授权提供器 实例

httpBasicAuthorizeProvider

@Bean(value="httpBasicAuthorizeProvider")
 @ConditionalOnMissingBean(name="httpBasicAuthorizeProvider")
public AuthorizeProvider httpBasicAuthorizeProvider(@Qualifier(value="exceptionAuthenticationEntryPoint")
                                                                                                                                                            org.springframework.security.web.AuthenticationEntryPoint exceptionAuthenticationEntryPoint)

Basic登陆授权提供器

Parameters:

exceptionAuthenticationEntryPoint - 异常处理

Returns:

授权提供器 实例

exceptionAuthorizeProvider

@Bean(value="exceptionAuthorizeProvider")
 @ConditionalOnMissingBean(name="exceptionAuthorizeProvider")
public AuthorizeProvider exceptionAuthorizeProvider(@Qualifier(value="exceptionAuthenticationEntryPoint")
                                                                                                                                                            org.springframework.security.web.AuthenticationEntryPoint exceptionAuthenticationEntryPoint,
                                                                                                                                                            org.springframework.security.web.access.AccessDeniedHandler customAccessDeniedHandler)

异常处理授权提供器

Parameters:

exceptionAuthenticationEntryPoint - AuthenticationEntryPoint

customAccessDeniedHandler - 权限拒绝处理器

Returns:

授权提供器 实例

corsAuthorizeProvider

@Bean(value="corsAuthorizeProvider")
 @ConditionalOnMissingBean(name="corsAuthorizeProvider")
public AuthorizeProvider corsAuthorizeProvider()

跨域处理授权提供器

Returns:

授权提供器 实例

csrfAuthorizeProvider

@Bean(value="csrfAuthorizeProvider")
 @ConditionalOnMissingBean(name="csrfAuthorizeProvider")
public AuthorizeProvider csrfAuthorizeProvider()

CSRF处理授权提供器

Returns:

授权提供器 实例