com.github.choonchernlim.security.adfs.saml2

Class SAMLWebSecurityConfigurerAdapter

java.lang.Object

org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

com.github.choonchernlim.security.adfs.saml2.SAMLWebSecurityConfigurerAdapter

All Implemented Interfaces:

org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

public abstract class SAMLWebSecurityConfigurerAdapter
extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Spring Security configuration to authenticate against ADFS using SAML protocol. This class should be extended by Sp's Java-based Spring configuration for web security.

Constructor Summary

Constructors

Constructor and Description
SAMLWebSecurityConfigurerAdapter()

Method Summary

Methods

Modifier and Type	Method and Description
org.springframework.security.saml.processor.HTTPArtifactBinding	artifactBinding()
org.springframework.security.authentication.AuthenticationManager	authenticationManagerBean()
protected void	configure(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
org.springframework.security.saml.context.SAMLContextProviderImpl	contextProvider()
org.springframework.security.saml.websso.WebSSOProfileECPImpl	ecpprofile()
org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler	failureRedirectHandler()
org.springframework.security.web.FilterChainProxy	filterChainProxy()
org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl	hokWebSSOProfile()
org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl	hokWebSSOprofileConsumer()
org.apache.commons.httpclient.HttpClient	httpClient()
org.springframework.security.saml.key.KeyManager	keyManager()
org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler	logoutHandler()
org.springframework.security.saml.websso.SingleLogoutProfile	logoutprofile()
org.springframework.security.saml.metadata.CachingMetadataManager	metadata()
org.springframework.security.saml.metadata.MetadataDisplayFilter	metadataDisplayFilter()
org.springframework.security.saml.metadata.MetadataGeneratorFilter	metadataGeneratorFilter()
org.springframework.security.saml.processor.HTTPPAOS11Binding	paosBinding()
org.opensaml.xml.parse.StaticBasicParserPool	parserPool()
org.springframework.security.saml.parser.ParserPoolHolder	parserPoolHolder()
org.springframework.security.saml.processor.HTTPPostBinding	postBinding()
org.springframework.security.saml.processor.SAMLProcessorImpl	processor()
org.apache.commons.httpclient.protocol.Protocol	protocol()
org.apache.commons.httpclient.protocol.ProtocolSocketFactory	protocolSocketFactory()
org.springframework.security.saml.processor.HTTPRedirectDeflateBinding	redirectDeflateBinding()
org.springframework.security.saml.SAMLAuthenticationProvider	samlAuthenticationProvider()
static org.springframework.security.saml.SAMLBootstrap	samlBootstrap()
protected abstract SAMLConfigBean	samlConfigBean() Sp's SAMLConfigBean to further customize this security configuration.
org.springframework.security.saml.SAMLEntryPoint	samlEntryPoint()
org.springframework.security.saml.SAMLDiscovery	samlIDPDiscovery()
protected org.springframework.security.config.annotation.web.builders.HttpSecurity	samlizedConfig(org.springframework.security.config.annotation.web.builders.HttpSecurity http) Fluent API that pre-configures HttpSecurity with SAML specific configuration.
protected org.springframework.security.config.annotation.web.builders.WebSecurity	samlizedConfig(org.springframework.security.config.annotation.web.builders.WebSecurity web) Fluent API that pre-configures WebSecurity with SAML specific configuration.
org.springframework.security.saml.log.SAMLDefaultLogger	samlLogger()
org.springframework.security.saml.SAMLLogoutFilter	samlLogoutFilter()
org.springframework.security.saml.SAMLLogoutProcessingFilter	samlLogoutProcessingFilter()
org.springframework.security.saml.SAMLProcessingFilter	samlProcessingFilter()
org.springframework.security.saml.SAMLWebSSOHoKProcessingFilter	samlWebSSOHoKProcessingFilter()
org.springframework.security.saml.processor.HTTPSOAP11Binding	soapBinding()
org.springframework.beans.factory.config.MethodInvokingFactoryBean	socketFactoryInitialization()
org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler	successLogoutHandler()
org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler	successRedirectHandler()
org.springframework.security.saml.trust.httpclient.TLSProtocolConfigurer	tlsProtocolConfigurer()
org.apache.velocity.app.VelocityEngine	velocityEngine()
org.springframework.security.saml.websso.WebSSOProfile	webSSOprofile()
org.springframework.security.saml.websso.WebSSOProfileConsumer	webSSOprofileConsumer()

Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

authenticationManager, configure, configure, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SAMLWebSecurityConfigurerAdapter

public SAMLWebSecurityConfigurerAdapter()

Method Detail

samlBootstrap

@Bean
public static org.springframework.security.saml.SAMLBootstrap samlBootstrap()

samlConfigBean

@Bean
protected abstract SAMLConfigBean samlConfigBean()

Sp's SAMLConfigBean to further customize this security configuration.

Returns:

SAML config bean

samlizedConfig

protected final org.springframework.security.config.annotation.web.builders.HttpSecurity samlizedConfig(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                                 throws Exception

Fluent API that pre-configures HttpSecurity with SAML specific configuration.

Parameters:

http - HttpSecurity instance

Returns:

Same HttpSecurity instance

Throws:

Exception

samlizedConfig

protected final org.springframework.security.config.annotation.web.builders.WebSecurity samlizedConfig(org.springframework.security.config.annotation.web.builders.WebSecurity web)
                                                                                                throws Exception

Fluent API that pre-configures WebSecurity with SAML specific configuration.

Parameters:

web - WebSecurity instance

Returns:

Same WebSecurity instance

Throws:

Exception

samlEntryPoint

@Bean
public org.springframework.security.saml.SAMLEntryPoint samlEntryPoint()

metadataGeneratorFilter

@Bean
public org.springframework.security.saml.metadata.MetadataGeneratorFilter metadataGeneratorFilter()

httpClient

@Bean
public org.apache.commons.httpclient.HttpClient httpClient()

filterChainProxy

@Bean
public org.springframework.security.web.FilterChainProxy filterChainProxy()
                                                                   throws Exception

Throws:

Exception

successRedirectHandler

@Bean
public org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler successRedirectHandler()

failureRedirectHandler

@Bean
public org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler failureRedirectHandler()

successLogoutHandler

@Bean
public org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler successLogoutHandler()

authenticationManagerBean

@Bean
public org.springframework.security.authentication.AuthenticationManager authenticationManagerBean()
                                                                                            throws Exception

Overrides:

authenticationManagerBean in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

Exception

configure

protected void configure(org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder auth)
                  throws Exception

Overrides:

configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

Throws:

Exception

samlLogger

@Bean
public org.springframework.security.saml.log.SAMLDefaultLogger samlLogger()

keyManager

@Bean
public org.springframework.security.saml.key.KeyManager keyManager()

samlIDPDiscovery

@Bean
public org.springframework.security.saml.SAMLDiscovery samlIDPDiscovery()

metadataDisplayFilter

@Bean
public org.springframework.security.saml.metadata.MetadataDisplayFilter metadataDisplayFilter()

tlsProtocolConfigurer

@Bean
public org.springframework.security.saml.trust.httpclient.TLSProtocolConfigurer tlsProtocolConfigurer()

protocolSocketFactory

@Bean
public org.apache.commons.httpclient.protocol.ProtocolSocketFactory protocolSocketFactory()

protocol

@Bean
public org.apache.commons.httpclient.protocol.Protocol protocol()

socketFactoryInitialization

@Bean
public org.springframework.beans.factory.config.MethodInvokingFactoryBean socketFactoryInitialization()

metadata

@Bean
public org.springframework.security.saml.metadata.CachingMetadataManager metadata()
                                                                           throws org.opensaml.saml2.metadata.provider.MetadataProviderException

Throws:

org.opensaml.saml2.metadata.provider.MetadataProviderException

samlAuthenticationProvider

@Bean
public org.springframework.security.saml.SAMLAuthenticationProvider samlAuthenticationProvider()

contextProvider

@Bean
public org.springframework.security.saml.context.SAMLContextProviderImpl contextProvider()

samlProcessingFilter

@Bean
public org.springframework.security.saml.SAMLProcessingFilter samlProcessingFilter()
                                                                            throws Exception

Throws:

Exception

samlWebSSOHoKProcessingFilter

@Bean
public org.springframework.security.saml.SAMLWebSSOHoKProcessingFilter samlWebSSOHoKProcessingFilter()
                                                                                              throws Exception

Throws:

Exception

logoutHandler

@Bean
public org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler logoutHandler()

samlLogoutFilter

@Bean
public org.springframework.security.saml.SAMLLogoutFilter samlLogoutFilter()

samlLogoutProcessingFilter

@Bean
public org.springframework.security.saml.SAMLLogoutProcessingFilter samlLogoutProcessingFilter()

processor

@Bean
public org.springframework.security.saml.processor.SAMLProcessorImpl processor()

webSSOprofileConsumer

@Bean
public org.springframework.security.saml.websso.WebSSOProfileConsumer webSSOprofileConsumer()

hokWebSSOprofileConsumer

@Bean
public org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl hokWebSSOprofileConsumer()

webSSOprofile

@Bean
public org.springframework.security.saml.websso.WebSSOProfile webSSOprofile()

hokWebSSOProfile

@Bean
public org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl hokWebSSOProfile()

ecpprofile

@Bean
public org.springframework.security.saml.websso.WebSSOProfileECPImpl ecpprofile()

logoutprofile

@Bean
public org.springframework.security.saml.websso.SingleLogoutProfile logoutprofile()

postBinding

@Bean
public org.springframework.security.saml.processor.HTTPPostBinding postBinding()

redirectDeflateBinding

@Bean
public org.springframework.security.saml.processor.HTTPRedirectDeflateBinding redirectDeflateBinding()

artifactBinding

@Bean
public org.springframework.security.saml.processor.HTTPArtifactBinding artifactBinding()

soapBinding

@Bean
public org.springframework.security.saml.processor.HTTPSOAP11Binding soapBinding()

paosBinding

@Bean
public org.springframework.security.saml.processor.HTTPPAOS11Binding paosBinding()

velocityEngine

@Bean
public org.apache.velocity.app.VelocityEngine velocityEngine()

parserPool

@Bean(initMethod="initialize")
public org.opensaml.xml.parse.StaticBasicParserPool parserPool()

parserPoolHolder

@Bean
public org.springframework.security.saml.parser.ParserPoolHolder parserPoolHolder()