1 package com.supwisdom.institute.backend.admin.bff.configuration;
3 import org.springframework.context.annotation.Bean;
4 import org.springframework.context.annotation.Configuration;
5 import org.springframework.security.access.AccessDecisionManager;
6 import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;
8 import com.supwisdom.infras.security.web.access.intercept.InfrasFilterSecurityInterceptor;
9 import com.supwisdom.institute.backend.admin.bff.security.web.access.MyAccessDecisionManager;
10 import com.supwisdom.institute.backend.admin.bff.security.web.access.intercept.InMemeryFilterInvocationSecurityMetadataSource;
11 import com.supwisdom.institute.backend.admin.bff.security.web.access.intercept.MyFilterSecurityInterceptor;
13 import lombok.extern.slf4j.Slf4j;
17 public class InfrasFilterSecurityInterceptorConfig {
20 // public FilterInvocationSecurityMetadataSource securityMetadataSource() {
21 // MyFilterInvocationSecurityMetadataSource securityMetadataSource = new MyFilterInvocationSecurityMetadataSource();
22 // log.debug("InfrasFilterSecurityInterceptorConfig securityMetadataSource is {}", securityMetadataSource);
24 // return securityMetadataSource;
28 public FilterInvocationSecurityMetadataSource securityMetadataSource() {
29 InMemeryFilterInvocationSecurityMetadataSource securityMetadataSource = new InMemeryFilterInvocationSecurityMetadataSource();
30 log.debug("InfrasFilterSecurityInterceptorConfig securityMetadataSource is {}", securityMetadataSource);
32 return securityMetadataSource;
37 public AccessDecisionManager accessDecisionManager() {
38 MyAccessDecisionManager accessDecisionManager = new MyAccessDecisionManager();
39 log.debug("InfrasFilterSecurityInterceptorConfig accessDecisionManager is {}", accessDecisionManager);
41 return accessDecisionManager;
45 public InfrasFilterSecurityInterceptor infrasFilterSecurityInterceptor() throws Exception {
46 MyFilterSecurityInterceptor myFilterSecurityInterceptor = new MyFilterSecurityInterceptor();
47 myFilterSecurityInterceptor.setRejectPublicInvocations(true);
48 log.debug("InfrasFilterSecurityInterceptorConfig infrasFilterSecurityInterceptor is {}", myFilterSecurityInterceptor);
50 return myFilterSecurityInterceptor;