Class ResourceServerSecurity

java.lang.Object

io.leandev.appfuse.security.resourceserver.ResourceServerSecurity

public final class ResourceServerSecurity
extends Object

Stateless JWT resource server 的固定安全組裝機制。

本 capability 只保證 blacklist、bearer、API key 與 Basic Auth 的組態和 filter 相對順序； 完全不持有 URL、HTTP method 或 authorization rule。Reference implementation 應在 ResourceServerSecurity.Builder.configure() 後自行呼叫 authorizeHttpRequests，決定具體位址與公開政策，再 build()。

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	ResourceServerSecurity.Builder

Method Summary

Modifier and Type	Method	Description
static ResourceServerSecurity.Builder	builder(org.springframework.security.config.annotation.web.builders.HttpSecurity http, TokenBlacklistStore tokenBlacklistStore, tools.jackson.databind.ObjectMapper objectMapper, JwtTokenProvider jwtTokenProvider, org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder, org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt, org.springframework.security.authentication.AbstractAuthenticationToken> jwtAuthenticationConverter, org.springframework.security.web.AuthenticationEntryPoint bearerEntryPoint, org.springframework.security.web.access.AccessDeniedHandler bearerAccessDeniedHandler)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

builder

public static ResourceServerSecurity.Builder builder(org.springframework.security.config.annotation.web.builders.HttpSecurity http,
 TokenBlacklistStore tokenBlacklistStore,
 tools.jackson.databind.ObjectMapper objectMapper,
 JwtTokenProvider jwtTokenProvider,
 org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder,
 org.springframework.core.convert.converter.Converter<org.springframework.security.oauth2.jwt.Jwt, org.springframework.security.authentication.AbstractAuthenticationToken> jwtAuthenticationConverter,
 org.springframework.security.web.AuthenticationEntryPoint bearerEntryPoint,
 org.springframework.security.web.access.AccessDeniedHandler bearerAccessDeniedHandler)