1
- package org .woehlke .simpleworklist .application . config ;
1
+ package org .woehlke .simpleworklist .config ;
2
2
3
3
import org .springframework .beans .factory .annotation .Autowired ;
4
4
import org .springframework .boot .autoconfigure .ImportAutoConfiguration ;
16
16
import org .springframework .security .core .userdetails .UserDetailsService ;
17
17
import org .springframework .security .crypto .bcrypt .BCryptPasswordEncoder ;
18
18
import org .springframework .security .crypto .password .PasswordEncoder ;
19
- import org .springframework .security .web . authentication . AuthenticationSuccessHandler ;
19
+ import org .springframework .security .crypto . password . Pbkdf2PasswordEncoder ;
20
20
import org .springframework .security .web .authentication .UsernamePasswordAuthenticationFilter ;
21
21
import org .springframework .web .servlet .config .annotation .EnableWebMvc ;
22
- import org .woehlke .simpleworklist .application .ApplicationProperties ;
23
- import org .woehlke .simpleworklist .user .login .LoginSuccessHandler ;
24
- import org .woehlke .simpleworklist .user .services .UserAccountSecurityService ;
22
+ import org .woehlke .simpleworklist .application .SimpleworklistProperties ;
23
+ import org .woehlke .simpleworklist .user .services .SimpleworklistUserAccountSecurityService ;
25
24
26
25
27
26
@ Configuration
34
33
WebMvcConfig .class
35
34
})
36
35
@ EnableConfigurationProperties ({
37
- ApplicationProperties .class
36
+ SimpleworklistProperties .class
38
37
})
39
38
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
40
39
41
40
private final AuthenticationManagerBuilder authenticationManagerBuilder ;
42
- private final AuthenticationSuccessHandler loginSuccessHandler ;
43
- private final UserAccountSecurityService userAccountSecurityService ;
44
- private final ApplicationProperties applicationProperties ;
41
+ // private final AuthenticationSuccessHandler loginSuccessHandler;
42
+ private final SimpleworklistUserAccountSecurityService simpleworklistUserAccountSecurityService ;
43
+ private final SimpleworklistProperties simpleworklistProperties ;
45
44
46
45
@ Autowired
47
46
public WebSecurityConfig (
48
- AuthenticationManagerBuilder authenticationManagerBuilder ,
49
- LoginSuccessHandler loginSuccessHandler ,
50
- UserAccountSecurityService userAccountSecurityService ,
51
- ApplicationProperties applicationProperties ) {
52
- this .authenticationManagerBuilder = authenticationManagerBuilder ;
53
- this .loginSuccessHandler = loginSuccessHandler ;
54
- this .userAccountSecurityService = userAccountSecurityService ;
55
- this .applicationProperties = applicationProperties ;
47
+ AuthenticationManagerBuilder auth ,
48
+ // LoginSuccessHandler loginSuccessHandler,
49
+ SimpleworklistUserAccountSecurityService simpleworklistUserAccountSecurityService ,
50
+ SimpleworklistProperties simpleworklistProperties ) {
51
+ this .authenticationManagerBuilder = auth ;
52
+ // this.loginSuccessHandler = loginSuccessHandler;
53
+ this .simpleworklistUserAccountSecurityService = simpleworklistUserAccountSecurityService ;
54
+ this .simpleworklistProperties = simpleworklistProperties ;
56
55
}
57
56
58
57
@ Override
@@ -61,35 +60,35 @@ protected void configure(HttpSecurity http) throws Exception {
61
60
.headers ()
62
61
.disable ()
63
62
.authorizeRequests ()
64
- .antMatchers (applicationProperties .getWebSecurity ().getAntPatternsPublic ())
63
+ .antMatchers (simpleworklistProperties .getWebSecurity ().getAntPatternsPublic ())
65
64
.permitAll ()
66
65
.anyRequest ()
67
66
.fullyAuthenticated ()
68
67
.and ()
69
68
.csrf ()
70
69
.and ()
71
70
.formLogin ()
72
- .loginPage (applicationProperties .getWebSecurity ().getLoginPage ())
73
- .usernameParameter (applicationProperties .getWebSecurity ().getUsernameParameter ())
74
- .passwordParameter (applicationProperties .getWebSecurity ().getPasswordParameter ())
75
- .loginProcessingUrl (applicationProperties .getWebSecurity ().getLoginProcessingUrl ())
76
- .failureForwardUrl (applicationProperties .getWebSecurity ().getFailureForwardUrl ())
77
- .defaultSuccessUrl (applicationProperties .getWebSecurity ().getDefaultSuccessUrl ())
78
- .successHandler (loginSuccessHandler )
71
+ .loginPage (simpleworklistProperties .getWebSecurity ().getLoginPage ())
72
+ .usernameParameter (simpleworklistProperties .getWebSecurity ().getUsernameParameter ())
73
+ .passwordParameter (simpleworklistProperties .getWebSecurity ().getPasswordParameter ())
74
+ .loginProcessingUrl (simpleworklistProperties .getWebSecurity ().getLoginProcessingUrl ())
75
+ .failureForwardUrl (simpleworklistProperties .getWebSecurity ().getFailureForwardUrl ())
76
+ .defaultSuccessUrl (simpleworklistProperties .getWebSecurity ().getDefaultSuccessUrl ())
77
+ // .successHandler(loginSuccessHandler)
79
78
.permitAll ()
80
79
.and ()
81
80
.csrf ()
82
81
.and ()
83
82
.logout ()
84
- .logoutUrl (applicationProperties .getWebSecurity ().getLogoutUrl ())
85
- .deleteCookies (applicationProperties .getWebSecurity ().getCookieNamesToClear ())
86
- .invalidateHttpSession (applicationProperties .getWebSecurity ().getInvalidateHttpSession ())
83
+ .logoutUrl (simpleworklistProperties .getWebSecurity ().getLogoutUrl ())
84
+ .deleteCookies (simpleworklistProperties .getWebSecurity ().getCookieNamesToClear ())
85
+ .invalidateHttpSession (simpleworklistProperties .getWebSecurity ().getInvalidateHttpSession ())
87
86
.permitAll ();
88
87
}
89
88
90
89
@ Bean
91
90
public UserDetailsService userDetailsService (){
92
- return this .userAccountSecurityService ;
91
+ return this .simpleworklistUserAccountSecurityService ;
93
92
}
94
93
95
94
/**
@@ -98,8 +97,16 @@ public UserDetailsService userDetailsService(){
98
97
*/
99
98
@ Bean
100
99
public PasswordEncoder encoder (){
101
- int strength = applicationProperties .getWebSecurity ().getStrengthBCryptPasswordEncoder ();
100
+ int strength = simpleworklistProperties .getWebSecurity ().getStrengthBCryptPasswordEncoder ();
102
101
return new BCryptPasswordEncoder (strength );
102
+ /*Ü
103
+ CharSequence secret=this.simpleworklistProperties.getWebSecurity().getSecret();
104
+ int iterations=this.simpleworklistProperties.getWebSecurity().getIterations();
105
+ int hashWidth=this.simpleworklistProperties.getWebSecurity().getHashWidth();
106
+ Pbkdf2PasswordEncoder encoder = (new Pbkdf2PasswordEncoder(secret,iterations,hashWidth));
107
+ encoder.setEncodeHashAsBase64(true);
108
+ return encoder;
109
+ */
103
110
}
104
111
105
112
@ Bean
@@ -113,7 +120,7 @@ public AuthenticationManager authenticationManager() throws Exception {
113
120
public UsernamePasswordAuthenticationFilter authenticationFilter () throws Exception {
114
121
UsernamePasswordAuthenticationFilter filter = new UsernamePasswordAuthenticationFilter ();
115
122
filter .setAuthenticationManager (authenticationManager ());
116
- filter .setFilterProcessesUrl (applicationProperties .getWebSecurity ().getLoginProcessingUrl ());
123
+ filter .setFilterProcessesUrl (simpleworklistProperties .getWebSecurity ().getLoginProcessingUrl ());
117
124
return filter ;
118
125
}
119
126
}
0 commit comments