Package com.vaadin.hilla.sso.starter

Class SingleSignOnConfiguration

java.lang.Object

com.vaadin.hilla.sso.starter.SingleSignOnConfiguration

@AutoConfiguration
@AutoConfigureBefore(com.vaadin.flow.spring.SpringSecurityAutoConfiguration.class)
@EnableWebSecurity
@ConditionalOnOAuth2ClientRegistrationProperties
@EnableConfigurationProperties(SingleSignOnProperties.class)
@Import(com.vaadin.flow.spring.security.VaadinAwareSecurityContextHolderStrategyConfiguration.class)
public class SingleSignOnConfiguration
extends Object

This configuration bean is provided to auto-configure Hilla and Spring to allow single sign-on against external identity providers.

It enables OAuth2/OpenID login for the identity providers defined in the current application configuration and instructs the application to accept requests for the login route, which can be configured setting the hilla.sso.login-route property (defaults to /login).

If you need a customized security configuration, you can disable this auto-configuration class by adding its fully-qualified name to the spring.autoconfigure.exclude property and provide your own configuration class.

Since:

2.0

Author:

Vaadin Ltd

Constructor Summary

Constructors

Constructor	Description
SingleSignOnConfiguration(SingleSignOnProperties properties, org.springframework.security.core.session.SessionRegistry sessionRegistry, org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository, org.springframework.context.ApplicationEventPublisher eventPublisher)	Creates an instance of this configuration bean.

Method Summary

Modifier and Type	Method	Description
BackChannelLogoutEndpoint	backChannelLogoutEndpoint()
BackChannelLogoutSubscription	backChannelLogoutSubscription()
BootstrapDataServiceListener	bootstrapDataServiceListener()
SingleSignOnContext	singleSignOnContext()
SingleSignOnEndpoint	singleSignOnEndpoint()
UserEndpoint	userEndpoint()
org.springframework.security.web.SecurityFilterChain	vaadinSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SingleSignOnConfiguration

public SingleSignOnConfiguration(SingleSignOnProperties properties,
 org.springframework.security.core.session.SessionRegistry sessionRegistry,
 org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository,
 org.springframework.context.ApplicationEventPublisher eventPublisher)

Creates an instance of this configuration bean.

Parameters:

properties - the configuration properties

sessionRegistry - the session registry

clientRegistrationRepository - the client-registration repository

eventPublisher - the event publisher for logout events

Method Details

backChannelLogoutSubscription

@Bean
public BackChannelLogoutSubscription backChannelLogoutSubscription()

singleSignOnContext

@Bean
public SingleSignOnContext singleSignOnContext()

bootstrapDataServiceListener

@Bean
public BootstrapDataServiceListener bootstrapDataServiceListener()

backChannelLogoutEndpoint

@Bean
public BackChannelLogoutEndpoint backChannelLogoutEndpoint()

singleSignOnEndpoint

@Bean
public SingleSignOnEndpoint singleSignOnEndpoint()

userEndpoint

@Bean
public UserEndpoint userEndpoint()

vaadinSecurityFilterChain

@Bean
public org.springframework.security.web.SecurityFilterChain vaadinSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                               throws Exception

Throws:

Exception