com.c4_soft.springaddons.security.oidc.starter.properties.SpringAddonsOidcResourceServerProperties Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of spring-addons-starter-oidc Show documentation

There is a newer version: 8.0-RC1

Show newest version

package com.c4_soft.springaddons.security.oidc.starter.properties;

import java.util.List;

import org.springframework.boot.context.properties.ConfigurationProperties;

import lombok.Data;

/**
 * Auto-configuration for an OAuth2 resource server Security(Web)FilterChain with @Order(LOWEST_PRECEDENCE). Typical use case is a REST API secured with
 * access tokens. Default configuration is as follow: no securityMatcher to process all the requests that were not intercepted by higher @Order
 * Security(Web)FilterChains, no session, disabled CSRF protection, and 401 to unauthorized requests.
 *
 * @author Jerome Wacongne ch4mp@c4-soft.com
 */
@Data
@ConfigurationProperties
public class SpringAddonsOidcResourceServerProperties {

    /**
     * Resource server SecurityFilterChain bean and all its dependencies are instantiated only if true.
     */
    private boolean enabled = true;

    /**
     * Path matchers for the routes accessible to anonymous requests
     */
    private List permitAll = List.of();

    /**
     * Whether to disable sessions. It should remain true.
     */
    private boolean statlessSessions = true;

    /**
     * CSRF protection configuration for the auto-configured client filter-chain
     */
    private Csrf csrf = Csrf.DISABLE;

    /**
     * Fine grained CORS configuration
     * 
     * @deprecated use com.c4-soft.springaddons.oidc.cors instead
     */
    @Deprecated(forRemoval = true)
    private List cors = List.of();

}