Package com.endurancetrio.app.config

Class AppSecurityConfig

java.lang.Object

com.endurancetrio.app.config.AppSecurityConfig

@Configuration
@EnableWebSecurity
public class AppSecurityConfig
extends Object

Security configuration for the EnduranceTrio application.

Constructor Summary

Constructors

Constructor	Description
AppSecurityConfig(String allowedOrigins, EnduranceTrioAuthProvider authProvider, EnduranceTrioAuthEntryPoint entryPoint)

Method Summary

Modifier and Type	Method	Description
EnduranceTrioAuthFilter	authenticationFilter()
org.springframework.security.authentication.AuthenticationManager	authenticationManager()
org.springframework.web.cors.CorsConfigurationSource	corsConfigurationSource()	Creates and configures a CORS (Cross-Origin Resource Sharing) configuration source bean.
org.springframework.security.web.SecurityFilterChain	securityFilterChainAPI(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Security filter chain for API endpoints.
org.springframework.security.web.SecurityFilterChain	securityFilterChainWeb(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Security filter chain for UI (Thymeleaf) pages.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AppSecurityConfig

@Autowired
public AppSecurityConfig(@Value("${cors.allowed-origins}")
 String allowedOrigins,
 EnduranceTrioAuthProvider authProvider,
 EnduranceTrioAuthEntryPoint entryPoint)

Method Details

corsConfigurationSource

@Bean
public org.springframework.web.cors.CorsConfigurationSource corsConfigurationSource()

Creates and configures a CORS (Cross-Origin Resource Sharing) configuration source bean. This bean defines CORS policies for the application, allowing or restricting cross-origin requests.

Returns:

CorsConfigurationSource a fully configured CORS configuration source registered for all application endpoints

securityFilterChainAPI

@Bean
@Order(1)
public org.springframework.security.web.SecurityFilterChain securityFilterChainAPI(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

Security filter chain for API endpoints.

Parameters:

http - the HttpSecurity to configure

Returns:

the configured SecurityFilterChain

securityFilterChainWeb

@Bean
@Order(2)
public org.springframework.security.web.SecurityFilterChain securityFilterChainWeb(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

Security filter chain for UI (Thymeleaf) pages.

Parameters:

http - the HttpSecurity to configure

Returns:

the configured SecurityFilterChain

authenticationManager

@Bean
public org.springframework.security.authentication.AuthenticationManager authenticationManager()

authenticationFilter

@Bean
public EnduranceTrioAuthFilter authenticationFilter()