Package org.apache.nifi.web.security.configuration

Class WebSecurityConfiguration

java.lang.Object

org.apache.nifi.web.security.configuration.WebSecurityConfiguration

@Import(AuthenticationSecurityConfiguration.class)
@Configuration
@EnableWebSecurity
@EnableMethodSecurity
public class WebSecurityConfiguration
extends Object

Application Security Configuration using Spring Security

Field Summary

Fields

Modifier and Type	Field	Description
private static final List<String>	UNFILTERED_PATHS
private static final org.springframework.security.web.util.matcher.RequestMatcher	UNFILTERED_PATHS_REQUEST_MATCHER

Constructor Summary

Constructors

Constructor	Description
WebSecurityConfiguration()

Method Summary

Modifier and Type	Method	Description
org.springframework.security.authentication.AuthenticationManager	authenticationManager(List<org.springframework.security.authentication.AuthenticationProvider> authenticationProviders)	Spring Security Authentication Manager configured using Authentication Providers from specific configuration classes
org.springframework.security.web.SecurityFilterChain	securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http, NiFiProperties properties, StandardAuthenticationEntryPoint authenticationEntryPoint, X509AuthenticationFilter x509AuthenticationFilter, org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter bearerTokenAuthenticationFilter, NiFiAnonymousAuthenticationFilter anonymousAuthenticationFilter, org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter oAuth2LoginAuthenticationFilter, org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter oAuth2AuthorizationCodeGrantFilter, org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter oAuth2AuthorizationRequestRedirectFilter, OidcBearerTokenRefreshFilter oidcBearerTokenRefreshFilter, OidcLogoutFilter oidcLogoutFilter, org.springframework.security.saml2.provider.service.web.authentication.Saml2WebSsoAuthenticationFilter saml2WebSsoAuthenticationFilter, org.springframework.security.saml2.provider.service.web.Saml2WebSsoAuthenticationRequestFilter saml2WebSsoAuthenticationRequestFilter, org.springframework.security.saml2.provider.service.web.Saml2MetadataFilter saml2MetadataFilter, org.springframework.security.saml2.provider.service.web.authentication.logout.Saml2LogoutRequestFilter saml2LogoutRequestFilter, org.springframework.security.saml2.provider.service.web.authentication.logout.Saml2LogoutResponseFilter saml2LogoutResponseFilter, Saml2SingleLogoutFilter saml2SingleLogoutFilter, Saml2LocalLogoutFilter saml2LocalLogoutFilter)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

UNFILTERED_PATHS

private static final List<String> UNFILTERED_PATHS

UNFILTERED_PATHS_REQUEST_MATCHER

private static final org.springframework.security.web.util.matcher.RequestMatcher UNFILTERED_PATHS_REQUEST_MATCHER

Constructor Details

WebSecurityConfiguration

public WebSecurityConfiguration()

Method Details

authenticationManager

@Bean
public org.springframework.security.authentication.AuthenticationManager authenticationManager(List<org.springframework.security.authentication.AuthenticationProvider> authenticationProviders)

Spring Security Authentication Manager configured using Authentication Providers from specific configuration classes

Parameters:

authenticationProviders - Autowired Authentication Providers

Returns:

Authentication Manager

securityFilterChain

@Bean
public org.springframework.security.web.SecurityFilterChain securityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
 NiFiProperties properties,
 StandardAuthenticationEntryPoint authenticationEntryPoint,
 X509AuthenticationFilter x509AuthenticationFilter,
 org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter bearerTokenAuthenticationFilter,
 NiFiAnonymousAuthenticationFilter anonymousAuthenticationFilter,
 org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter oAuth2LoginAuthenticationFilter,
 org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter oAuth2AuthorizationCodeGrantFilter,
 org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter oAuth2AuthorizationRequestRedirectFilter,
 OidcBearerTokenRefreshFilter oidcBearerTokenRefreshFilter,
 OidcLogoutFilter oidcLogoutFilter,
 org.springframework.security.saml2.provider.service.web.authentication.Saml2WebSsoAuthenticationFilter saml2WebSsoAuthenticationFilter,
 org.springframework.security.saml2.provider.service.web.Saml2WebSsoAuthenticationRequestFilter saml2WebSsoAuthenticationRequestFilter,
 org.springframework.security.saml2.provider.service.web.Saml2MetadataFilter saml2MetadataFilter,
 org.springframework.security.saml2.provider.service.web.authentication.logout.Saml2LogoutRequestFilter saml2LogoutRequestFilter,
 org.springframework.security.saml2.provider.service.web.authentication.logout.Saml2LogoutResponseFilter saml2LogoutResponseFilter,
 Saml2SingleLogoutFilter saml2SingleLogoutFilter,
 Saml2LocalLogoutFilter saml2LocalLogoutFilter)
                                                                         throws Exception

Throws:

Exception