public class DefaultSecurityConfig extends Object implements SecurityConfig, SecurityConfigurator, leap.core.ioc.PostConfigureBean
| 限定符和类型 | 类和说明 |
|---|---|
protected static class |
DefaultSecurityConfig.AntPathIgnore |
| 构造器和说明 |
|---|
DefaultSecurityConfig() |
| 限定符和类型 | 方法和说明 |
|---|---|
SecurityConfig |
config()
Returns the
SecurityConfig configuration object for current web application. |
String |
getAuthenticationTokenCookieName() |
String |
getAuthenticationTokenHeaderName() |
String |
getAuthenticationTokenType() |
String |
getCookieDomain()
Optional.
|
String |
getCsrfHeaderName() |
String |
getCsrfParameterName() |
CsrfStore |
getCsrfStore()
Required.
|
int |
getDefaultAuthenticationExpires()
Returns the default expires time in seconds used in persisted authentication, such authentication cookie.
|
int |
getDefaultRememberMeExpires()
Returns the default expires time in seconds of remember-me cookie.
|
String[] |
getIgnorePaths() |
leap.core.web.RequestIgnore[] |
getIgnores()
Optional.
|
SecurityInterceptor[] |
getInterceptors()
Optional.
|
String |
getLoginAction()
Required.
|
String |
getLoginUrl()
Returns the url for promote user login.
|
String |
getLogoutAction()
Required.
|
String |
getLogoutSuccessUrl()
Optional.
|
leap.core.security.crypto.PasswordEncoder |
getPasswordEncoder()
Required.
|
Map<String,SecurityFailureHandler> |
getPathPrefixFailureHandlers()
Returns the failure handler map for path prefixes.
|
String |
getRememberMeCookieName()
Returns the name of remember-me cookie.
|
String |
getRememberMeExpiresParameterName()
Returns the request parameter name for specify the expires time of remember-me cookie in login flow.
|
String |
getRememberMeParameterName()
Returns the request parameter name for enable or disable remember-me in login flow.
|
String |
getRememberMeSecret()
Returns the secret key use to sign the remember-me cookie.
|
String |
getReturnUrlParameterName()
Returns the request parameter name of return url used by sigin flow.
|
String |
getSecret() |
SecuredPaths |
getSecuredPaths()
Returns the
SecuredPaths. |
UserStore |
getUserStore()
Required.
|
SecurityConfigurator |
ignore(String path)
Do not intercept the given path.
|
leap.core.ioc.BeanList<SecurityInterceptor> |
interceptors()
Returns a mutable list contains all
SecurityInterceptor. |
boolean |
isAuthenticateAnyRequests()
Returns
true if all request paths will be intercepted by security module and checks the user authentication. |
boolean |
isAuthenticationTokenEnabled() |
boolean |
isAuthorizeAnyRequests()
Returns
true if all request paths will be intercepted by security module and checks the user authorization. |
boolean |
isCorsIgnored()
Returns
true if ignore cors request. |
boolean |
isCrossContext()
Returns
true if user authentication is cross contexts in the same web server. |
boolean |
isCsrfEnabled()
Returns
true if csrf security enabled. |
boolean |
isEnabled()
Returns
true if web security is enabled. |
boolean |
isLoginEnabled()
Default is true.
|
boolean |
isLoginRedirectRoot()
Is redirect to root path after login success.
|
boolean |
isLogoutEnabled()
Default is true.
|
boolean |
isRememberMeEnabled()
Returns
true if remember-me authentication is enabled. |
SecuredPaths |
paths()
Returns the paths configurator.
|
void |
postConfigure(leap.core.BeanFactory factory,
leap.core.AppConfig config) |
DefaultSecurityConfig |
setAuthenticateAnyRequests(boolean authenticateAnyRequests)
Sets the value of
SecurityConfig.isAuthenticateAnyRequests() |
void |
setAuthenticationTokenCookieName(String authenticationTokenCookieName) |
DefaultSecurityConfig |
setAuthenticationTokenEnabled(boolean authenticationTokenEnabled)
Sets the value of
SecurityConfig.isAuthenticationTokenEnabled() |
void |
setAuthenticationTokenHeaderName(String authenticationTokenHeaderName) |
void |
setAuthenticationTokenType(String authenticationTokenType) |
DefaultSecurityConfig |
setAuthorizeAnyRequests(boolean authorizeAnyRequests)
Sets the value of
SecurityConfig.isAuthorizeAnyRequests() |
void |
setCookieDomain(String cookieDomain) |
void |
setCorsIgnored(boolean corsIgnored) |
DefaultSecurityConfig |
setCrossContext(boolean crossContext)
Enables or Disables cross context web security.
|
DefaultSecurityConfig |
setCsrfEnabled(boolean csrfEnabled)
Sets the value of
SecurityConfig.isCsrfEnabled() |
DefaultSecurityConfig |
setCsrfHeaderName(String csrfHeaderName)
Sets the csrf header name in
SecurityConfig.getCsrfHeaderName(). |
DefaultSecurityConfig |
setCsrfParameterName(String csrfParameterName)
Sets the csf parameter name in
SecurityConfig.getCsrfParameterName() |
SecurityConfigurator |
setCsrfStore(CsrfStore csrfStore)
Sets the default implementation of
CsrfStore. |
SecurityConfigurator |
setDefaultAuthenticationExpires(int defaultAuthenticationExpires)
Sets the value of
SecurityConfig.getDefaultAuthenticationExpires() |
DefaultSecurityConfig |
setDefaultRememberMeExpires(int defaultRememberExpires) |
SecurityConfigurator |
setEnabled(boolean enabled)
Sets enable or disable.
|
void |
setIgnorePaths(String[] ignorePaths) |
SecurityConfigurator |
setLoginAction(String path)
Sets the login action.
|
SecurityConfigurator |
setLoginEnabled(boolean loginEnabled)
Sets the value of
SecurityConfig.isLoginEnabled() |
void |
setLoginRedirectRoot(boolean loginRedirectRoot) |
DefaultSecurityConfig |
setLoginUrl(String url)
Sets the login url.
|
SecurityConfigurator |
setLogoutAction(String path)
Sets the logout action.
|
SecurityConfigurator |
setLogoutEnabled(boolean logoutEnabled)
Sets the value of
SecurityConfig.isLogoutEnabled() |
DefaultSecurityConfig |
setLogoutSuccessUrl(String url) |
SecurityConfigurator |
setPasswordEncoder(leap.core.security.crypto.PasswordEncoder encoder)
Sets the default implementation of
PasswordEncoder. |
SecurityConfigurator |
setPathPrefixFailureHandler(String pathPrefix,
SecurityFailureHandler failureHandler)
Sets the
SecurityFailureHandler for the path prefix. |
DefaultSecurityConfig |
setRememberMeCookieName(String rememberMeCookieName)
Sets the remember-me cookie's name.
|
DefaultSecurityConfig |
setRememberMeEnabled(boolean rememberMeEnabled)
Enables or Disables remember me.
|
DefaultSecurityConfig |
setRememberMeExpiresParameterName(String rememberMeExpiresParameterName) |
DefaultSecurityConfig |
setRememberMeParameterName(String rememberMeParameterName) |
DefaultSecurityConfig |
setRememberMeSecret(String rememberMeSecret)
Sets the remember-me secret key.
|
DefaultSecurityConfig |
setReturnUrlParameterName(String returnUrlParameterName) |
void |
setTokenSecret(String tokenSecret) |
SecurityConfigurator |
setUserStore(UserStore userStore)
Sets the default implementation of
UserStore. |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitallowAnonymousAccessTo, authenticateAnyRequests, authorizeAnyRequests, enable, enableprotected leap.core.BeanFactory factory
protected boolean enabled
protected boolean crossContext
protected Boolean csrfEnabled
protected boolean corsIgnored
protected boolean loginEnabled
protected boolean loginRedirectRoot
protected boolean logoutEnabled
protected boolean authenticateAnyRequests
protected boolean authorizeAnyRequests
protected int defaultAuthenticationExpires
protected String returnUrlParameterName
protected boolean rememberMeEnabled
protected String rememberMeSecret
protected String rememberMeCookieName
protected String rememberMeParameterName
protected String rememberMeExpiresParameterName
protected String loginUrl
protected String loginAction
protected String logoutAction
protected String logoutSuccessUrl
protected int defaultRememberMeExpires
protected String csrfHeaderName
protected String csrfParameterName
protected boolean authenticationTokenEnabled
protected String authenticationTokenCookieName
protected String authenticationTokenHeaderName
protected String authenticationTokenType
protected String tokenSecret
protected String cookieDomain
protected String[] ignorePaths
protected List<leap.core.web.RequestIgnore> ignores
protected Map<String,SecurityFailureHandler> pathPrefixFailureHandlers
protected SecuredPaths securedPaths
protected leap.core.security.crypto.PasswordEncoder passwordEncoder
protected UserStore userStore
protected CsrfStore csrfStore
protected leap.core.ioc.BeanList<SecurityInterceptor> interceptors
public SecurityConfig config()
SecurityConfiguratorSecurityConfig configuration object for current web application.config 在接口中 SecurityConfiguratorpublic SecuredPaths paths()
SecurityConfiguratorpaths 在接口中 SecurityConfiguratorpublic boolean isEnabled()
SecurityConfigtrue if web security is enabled.isEnabled 在接口中 SecurityConfigpublic SecurityConfigurator setEnabled(boolean enabled)
SecurityConfiguratorsetEnabled 在接口中 SecurityConfiguratorpublic leap.core.ioc.BeanList<SecurityInterceptor> interceptors()
SecurityConfiguratorSecurityInterceptor.interceptors 在接口中 SecurityConfiguratorpublic SecurityInterceptor[] getInterceptors()
SecurityConfiggetInterceptors 在接口中 SecurityConfigpublic boolean isCrossContext()
SecurityConfigtrue if user authentication is cross contexts in the same web server.
That means single sign on corss contexts.
Default is false.
isCrossContext 在接口中 SecurityConfigpublic DefaultSecurityConfig setCrossContext(boolean crossContext)
SecurityConfiguratorsetCrossContext 在接口中 SecurityConfiguratorpublic boolean isCorsIgnored()
SecurityConfigtrue if ignore cors request.isCorsIgnored 在接口中 SecurityConfigpublic void setCorsIgnored(boolean corsIgnored)
public boolean isCsrfEnabled()
SecurityConfigtrue if csrf security enabled.
Default is true, it should not be disabled for security reason.
isCsrfEnabled 在接口中 SecurityConfigpublic DefaultSecurityConfig setCsrfEnabled(boolean csrfEnabled)
SecurityConfiguratorSecurityConfig.isCsrfEnabled()setCsrfEnabled 在接口中 SecurityConfiguratorpublic boolean isAuthenticateAnyRequests()
SecurityConfigtrue if all request paths will be intercepted by security module and checks the user authentication.
Default is false.
isAuthenticateAnyRequests 在接口中 SecurityConfigpublic DefaultSecurityConfig setAuthenticateAnyRequests(boolean authenticateAnyRequests)
SecurityConfiguratorSecurityConfig.isAuthenticateAnyRequests()public boolean isAuthorizeAnyRequests()
SecurityConfigtrue if all request paths will be intercepted by security module and checks the user authorization.
Default is false.
isAuthorizeAnyRequests 在接口中 SecurityConfigpublic DefaultSecurityConfig setAuthorizeAnyRequests(boolean authorizeAnyRequests)
SecurityConfiguratorSecurityConfig.isAuthorizeAnyRequests()setAuthorizeAnyRequests 在接口中 SecurityConfiguratorpublic UserStore getUserStore()
SecurityConfiggetUserStore 在接口中 SecurityConfigpublic CsrfStore getCsrfStore()
SecurityConfiggetCsrfStore 在接口中 SecurityConfigpublic SecurityConfigurator setUserStore(UserStore userStore)
SecurityConfiguratorUserStore.setUserStore 在接口中 SecurityConfiguratorpublic SecurityConfigurator setCsrfStore(CsrfStore csrfStore)
SecurityConfiguratorCsrfStore.setCsrfStore 在接口中 SecurityConfiguratorpublic String getReturnUrlParameterName()
SecurityConfiggetReturnUrlParameterName 在接口中 SecurityConfigpublic DefaultSecurityConfig setReturnUrlParameterName(String returnUrlParameterName)
public boolean isRememberMeEnabled()
SecurityConfigtrue if remember-me authentication is enabled.
Default is true.
isRememberMeEnabled 在接口中 SecurityConfigpublic DefaultSecurityConfig setRememberMeEnabled(boolean rememberMeEnabled)
SecurityConfiguratorsetRememberMeEnabled 在接口中 SecurityConfiguratorpublic String getRememberMeSecret()
SecurityConfig
Default is AppConfig.getSecret().
getRememberMeSecret 在接口中 SecurityConfigpublic DefaultSecurityConfig setRememberMeSecret(String rememberMeSecret)
SecurityConfiguratorsetRememberMeSecret 在接口中 SecurityConfiguratorpublic String getRememberMeCookieName()
SecurityConfiggetRememberMeCookieName 在接口中 SecurityConfigpublic DefaultSecurityConfig setRememberMeCookieName(String rememberMeCookieName)
SecurityConfiguratorsetRememberMeCookieName 在接口中 SecurityConfiguratorpublic String getRememberMeParameterName()
SecurityConfiggetRememberMeParameterName 在接口中 SecurityConfigpublic DefaultSecurityConfig setRememberMeParameterName(String rememberMeParameterName)
public String getRememberMeExpiresParameterName()
SecurityConfigpublic DefaultSecurityConfig setRememberMeExpiresParameterName(String rememberMeExpiresParameterName)
public int getDefaultRememberMeExpires()
SecurityConfiggetDefaultRememberMeExpires 在接口中 SecurityConfigpublic DefaultSecurityConfig setDefaultRememberMeExpires(int defaultRememberExpires)
public String getCsrfHeaderName()
getCsrfHeaderName 在接口中 SecurityConfigpublic String getCsrfParameterName()
getCsrfParameterName 在接口中 SecurityConfigpublic DefaultSecurityConfig setCsrfHeaderName(String csrfHeaderName)
SecurityConfiguratorSecurityConfig.getCsrfHeaderName().setCsrfHeaderName 在接口中 SecurityConfiguratorpublic DefaultSecurityConfig setCsrfParameterName(String csrfParameterName)
SecurityConfiguratorSecurityConfig.getCsrfParameterName()setCsrfParameterName 在接口中 SecurityConfiguratorpublic boolean isAuthenticationTokenEnabled()
isAuthenticationTokenEnabled 在接口中 SecurityConfigpublic int getDefaultAuthenticationExpires()
SecurityConfigpublic String getAuthenticationTokenCookieName()
public String getAuthenticationTokenHeaderName()
public void setAuthenticationTokenHeaderName(String authenticationTokenHeaderName)
public DefaultSecurityConfig setAuthenticationTokenEnabled(boolean authenticationTokenEnabled)
SecurityConfiguratorSecurityConfig.isAuthenticationTokenEnabled()public SecurityConfigurator setDefaultAuthenticationExpires(int defaultAuthenticationExpires)
SecurityConfiguratorSecurityConfig.getDefaultAuthenticationExpires()public void setAuthenticationTokenCookieName(String authenticationTokenCookieName)
public String getAuthenticationTokenType()
getAuthenticationTokenType 在接口中 SecurityConfigpublic void setAuthenticationTokenType(String authenticationTokenType)
public String getSecret()
getSecret 在接口中 SecurityConfigpublic void setTokenSecret(String tokenSecret)
public String[] getIgnorePaths()
public void setIgnorePaths(String[] ignorePaths)
public String getCookieDomain()
SecurityConfiggetCookieDomain 在接口中 SecurityConfigpublic void setCookieDomain(String cookieDomain)
public boolean isLoginEnabled()
SecurityConfigisLoginEnabled 在接口中 SecurityConfigpublic SecurityConfigurator setLoginEnabled(boolean loginEnabled)
SecurityConfiguratorSecurityConfig.isLoginEnabled()setLoginEnabled 在接口中 SecurityConfiguratorpublic boolean isLoginRedirectRoot()
SecurityConfigisLoginRedirectRoot 在接口中 SecurityConfigpublic void setLoginRedirectRoot(boolean loginRedirectRoot)
public boolean isLogoutEnabled()
SecurityConfigisLogoutEnabled 在接口中 SecurityConfigpublic SecurityConfigurator setLogoutEnabled(boolean logoutEnabled)
SecurityConfiguratorSecurityConfig.isLogoutEnabled()setLogoutEnabled 在接口中 SecurityConfiguratorpublic String getLoginUrl()
SecurityConfiggetLoginUrl 在接口中 SecurityConfigpublic DefaultSecurityConfig setLoginUrl(String url)
SecurityConfiguratorsetLoginUrl 在接口中 SecurityConfiguratorpublic String getLoginAction()
SecurityConfiggetLoginAction 在接口中 SecurityConfigpublic String getLogoutAction()
SecurityConfiggetLogoutAction 在接口中 SecurityConfigpublic String getLogoutSuccessUrl()
SecurityConfiggetLogoutSuccessUrl 在接口中 SecurityConfigpublic SecurityConfigurator setLoginAction(String path)
SecurityConfiguratorsetLoginAction 在接口中 SecurityConfiguratorpublic SecurityConfigurator setLogoutAction(String path)
SecurityConfiguratorsetLogoutAction 在接口中 SecurityConfiguratorpublic DefaultSecurityConfig setLogoutSuccessUrl(String url)
public SecurityConfigurator setPathPrefixFailureHandler(String pathPrefix, SecurityFailureHandler failureHandler)
SecurityConfiguratorSecurityFailureHandler for the path prefix.public leap.core.web.RequestIgnore[] getIgnores()
SecurityConfiggetIgnores 在接口中 SecurityConfigpublic Map<String,SecurityFailureHandler> getPathPrefixFailureHandlers()
SecurityConfiggetPathPrefixFailureHandlers 在接口中 SecurityConfigpublic SecuredPaths getSecuredPaths()
SecurityConfigSecuredPaths.getSecuredPaths 在接口中 SecurityConfigpublic SecurityConfigurator ignore(String path)
SecurityConfiguratorignore 在接口中 SecurityConfiguratorpublic SecurityConfigurator setPasswordEncoder(leap.core.security.crypto.PasswordEncoder encoder)
SecurityConfiguratorPasswordEncoder.setPasswordEncoder 在接口中 SecurityConfiguratorpublic leap.core.security.crypto.PasswordEncoder getPasswordEncoder()
SecurityConfigPasswordEncoder for authenticating user's password in security module.getPasswordEncoder 在接口中 SecurityConfigCopyright © 2019. All rights reserved.