Class SecurityConfig

  • All Implemented Interfaces:
    org.springframework.security.config.annotation.SecurityConfigurer<javax.servlet.Filter,​org.springframework.security.config.annotation.web.builders.WebSecurity>, org.springframework.security.config.annotation.web.WebSecurityConfigurer<org.springframework.security.config.annotation.web.builders.WebSecurity>

    @Configuration
    @EnableWebSecurity
    public class SecurityConfig
    extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
    • Constructor Summary

      Constructors 
      Constructor Description
      SecurityConfig()  
    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected void configure​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)  
      static org.springframework.validation.beanvalidation.LocalValidatorFactoryBean defaultValidator()
      Validation factory bean is configured here because its message interpolation mechanism is considered a potential threat if enabled.
      protected org.springframework.security.web.firewall.HttpFirewall strictFirewall()  
      • Methods inherited from class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

        authenticationManager, authenticationManagerBean, configure, configure, getApplicationContext, getHttp, init, setApplicationContext, setAuthenticationConfiguration, setContentNegotationStrategy, setObjectPostProcessor, setTrustResolver, userDetailsService, userDetailsServiceBean
    • Constructor Detail

      • SecurityConfig

        public SecurityConfig()
    • Method Detail

      • strictFirewall

        @Bean
        protected org.springframework.security.web.firewall.HttpFirewall strictFirewall()
      • configure

        protected void configure​(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                          throws Exception
        Overrides:
        configure in class org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
        Throws:
        Exception
      • defaultValidator

        @Bean
        public static org.springframework.validation.beanvalidation.LocalValidatorFactoryBean defaultValidator()
        Validation factory bean is configured here because its message interpolation mechanism is considered a potential threat if enabled.