Examples with FrameworkEndpointHandlerMapping org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping used on opensource projects

Example 1 with FrameworkEndpointHandlerMapping

use of org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping in project spring-security-oauth by spring-projects.

the class AuthorizationServerBeanDefinitionParserTests method testCheckTokenCustomEndpoint.

@Test
public void testCheckTokenCustomEndpoint() {
    if (!CHECK_TOKEN_CUSTOM_ENDPOINT_RESOURCE.equals(this.resource)) {
        return;
    }
    FrameworkEndpointHandlerMapping frameworkEndpointHandlerMapping = context.getBean(FrameworkEndpointHandlerMapping.class);
    assertNotNull(frameworkEndpointHandlerMapping);
    assertEquals("/custom_check_token", frameworkEndpointHandlerMapping.getPath("/oauth/check_token"));
}

Example 2 with FrameworkEndpointHandlerMapping

use of org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping in project spring-security-oauth by spring-projects.

the class AuthorizationServerSecurityConfiguration method configure.

@Override
protected void configure(HttpSecurity http) throws Exception {
    AuthorizationServerSecurityConfigurer configurer = new AuthorizationServerSecurityConfigurer();
    FrameworkEndpointHandlerMapping handlerMapping = endpoints.oauth2EndpointHandlerMapping();
    http.setSharedObject(FrameworkEndpointHandlerMapping.class, handlerMapping);
    configure(configurer);
    http.apply(configurer);
    String tokenEndpointPath = handlerMapping.getServletPath("/oauth/token");
    String tokenKeyPath = handlerMapping.getServletPath("/oauth/token_key");
    String checkTokenPath = handlerMapping.getServletPath("/oauth/check_token");
    if (!endpoints.getEndpointsConfigurer().isUserDetailsServiceOverride()) {
        UserDetailsService userDetailsService = http.getSharedObject(UserDetailsService.class);
        endpoints.getEndpointsConfigurer().userDetailsService(userDetailsService);
    }
    // @formatter:off
    http.authorizeRequests().antMatchers(tokenEndpointPath).fullyAuthenticated().antMatchers(tokenKeyPath).access(configurer.getTokenKeyAccess()).antMatchers(checkTokenPath).access(configurer.getCheckTokenAccess()).and().requestMatchers().antMatchers(tokenEndpointPath, tokenKeyPath, checkTokenPath).and().sessionManagement().sessionCreationPolicy(SessionCreationPolicy.NEVER);
    // @formatter:on
    http.setSharedObject(ClientDetailsService.class, clientDetailsService);
}

Example 3 with FrameworkEndpointHandlerMapping

use of org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping in project spring-security-oauth by spring-projects.

the class AuthorizationServerEndpointsConfigurer method frameworkEndpointHandlerMapping.

private FrameworkEndpointHandlerMapping frameworkEndpointHandlerMapping() {
    if (frameworkEndpointHandlerMapping == null) {
        frameworkEndpointHandlerMapping = new FrameworkEndpointHandlerMapping();
        frameworkEndpointHandlerMapping.setMappings(patternMap);
        frameworkEndpointHandlerMapping.setPrefix(prefix);
        frameworkEndpointHandlerMapping.setInterceptors(interceptors.toArray());
    }
    return frameworkEndpointHandlerMapping;
}

Example 4 with FrameworkEndpointHandlerMapping

use of org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping in project spring-security-oauth by spring-projects.

the class AuthorizationServerSecurityConfigurer method clientCredentialsTokenEndpointFilter.

private ClientCredentialsTokenEndpointFilter clientCredentialsTokenEndpointFilter(HttpSecurity http) {
    ClientCredentialsTokenEndpointFilter clientCredentialsTokenEndpointFilter = new ClientCredentialsTokenEndpointFilter(frameworkEndpointHandlerMapping().getServletPath("/oauth/token"));
    clientCredentialsTokenEndpointFilter.setAuthenticationManager(http.getSharedObject(AuthenticationManager.class));
    OAuth2AuthenticationEntryPoint authenticationEntryPoint = new OAuth2AuthenticationEntryPoint();
    authenticationEntryPoint.setTypeName("Form");
    authenticationEntryPoint.setRealmName(realm);
    clientCredentialsTokenEndpointFilter.setAuthenticationEntryPoint(authenticationEntryPoint);
    clientCredentialsTokenEndpointFilter = postProcess(clientCredentialsTokenEndpointFilter);
    http.addFilterBefore(clientCredentialsTokenEndpointFilter, BasicAuthenticationFilter.class);
    return clientCredentialsTokenEndpointFilter;
}

Example 5 with FrameworkEndpointHandlerMapping

use of org.springframework.security.oauth2.provider.endpoint.FrameworkEndpointHandlerMapping in project spring-security-oauth by spring-projects.

the class AuthorizationServerSecurityConfigurer method configure.

@Override
public void configure(HttpSecurity http) throws Exception {
    // ensure this is initialized
    frameworkEndpointHandlerMapping();
    if (allowFormAuthenticationForClients) {
        clientCredentialsTokenEndpointFilter(http);
    }
    for (Filter filter : tokenEndpointAuthenticationFilters) {
        http.addFilterBefore(filter, BasicAuthenticationFilter.class);
    }
    http.exceptionHandling().accessDeniedHandler(accessDeniedHandler);
}