SecurityConfig.java 4.87 KB
Newer Older
PWF-WK01\pengwufeng committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
///*
// * Copyright 2002-2016 the original author or authors.
// *
// * Licensed under the Apache License, Version 2.0 (the "License");
// * you may not use this file except in compliance with the License.
// * You may obtain a copy of the License at
// *
// *      http://www.apache.org/licenses/LICENSE-2.0
// *
// * Unless required by applicable law or agreed to in writing, software
// * distributed under the License is distributed on an "AS IS" BASIS,
// * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// * See the License for the specific language governing permissions and
// * limitations under the License.
// */
//package com.beecode.inz.authentication;
//
//
//import org.springframework.beans.factory.annotation.Autowired;
//import org.springframework.context.annotation.Configuration;
//import org.springframework.core.annotation.Order;
//import org.springframework.security.authentication.AuthenticationManager;
//import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
//import org.springframework.security.config.annotation.web.builders.HttpSecurity;
//import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
//import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
//import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
//
//import com.beecode.inz.authentication.filter.INZAppUsernamePasswordAuthenticationFilter;
//import com.beecode.inz.authentication.handler.RESTAuthenticationEntryPoint;
//import com.beecode.inz.authentication.handler.RESTAuthenticationFailureHandler;
//import com.beecode.inz.authentication.handler.RESTAuthenticationSuccessHandler;
//import com.beecode.inz.authentication.provider.TenantUserAuthenticationProvider;
//
//
///**
// * @author Joe Grandja
// */
//@EnableWebSecurity
//@Configuration
//public class SecurityConfig {
//	
//	@Autowired
//	private TenantUserAuthenticationProvider provider;
//	
//	@Autowired
//	private RESTAuthenticationEntryPoint authenticationEntryPoint;
//	@Autowired
//	private RESTAuthenticationFailureHandler authenticationFailureHandler;
//	@Autowired
//	private RESTAuthenticationSuccessHandler authenticationSuccessHandler;
//
//	
//	@Configuration
//	@Order(1)
//	public  class AppSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {
//
//		@Override
//		protected void configure(HttpSecurity http) throws Exception {
//			http.csrf().disable();
//			http.cors().disable();
//			http.authorizeRequests().antMatchers("/app/login","/logout").permitAll();
//			http.exceptionHandling().authenticationEntryPoint(authenticationEntryPoint);
//			INZAppUsernamePasswordAuthenticationFilter filter = new INZAppUsernamePasswordAuthenticationFilter();
//			http.addFilterAt(filter, UsernamePasswordAuthenticationFilter.class);
//			filter.setAuthenticationManager(authenticationManager());
//			filter.setAuthenticationSuccessHandler(authenticationSuccessHandler);
//			filter.setAuthenticationFailureHandler(authenticationFailureHandler);
//			http.logout().logoutUrl("/logout").logoutSuccessHandler(new UserLogoutSuccessHandler()).invalidateHttpSession(true).deleteCookies("x-auth-token").and();
//			
//			http.authenticationProvider(provider);
//		}
//		
//		@Override
//		protected void configure(AuthenticationManagerBuilder auth) throws Exception {
//			auth.authenticationProvider(provider);
//		}
//
//		@Override
//		protected AuthenticationManager authenticationManager() throws Exception {
//			return super.authenticationManager();
//		}
//	
//	}
//	
//	@Configuration
//	@Order(2)
//	public  class InzWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {
//
//		@Override
//		protected void configure(HttpSecurity http) throws Exception {
//			http.csrf().disable();
//			http.authorizeRequests().antMatchers("/api/login","/logout").permitAll();
//			http.authorizeRequests().anyRequest().authenticated();
//			http.exceptionHandling().authenticationEntryPoint(authenticationEntryPoint);
//			InzWebAuthenticationFilter filter = new InzWebAuthenticationFilter();
//			http.addFilterAt(filter, UsernamePasswordAuthenticationFilter.class);
//			filter.setAuthenticationManager(authenticationManager());
//			filter.setAuthenticationSuccessHandler(authenticationSuccessHandler);
//			filter.setAuthenticationFailureHandler(authenticationFailureHandler);
//			http.logout().logoutUrl("/logout").logoutSuccessHandler(new UserLogoutSuccessHandler()).invalidateHttpSession(true).deleteCookies("x-auth-token").and();
//			
//			http.authenticationProvider(provider);
//		}
//		
//		@Override
//		protected void configure(AuthenticationManagerBuilder auth) throws Exception {
//			auth.authenticationProvider(provider);
//		}
//
//		@Override
//		protected AuthenticationManager authenticationManager() throws Exception {
//			return super.authenticationManager();
//		}
//	
//	}
//}