JarCastingsmt-spring-security-stateless
The purpose of this library is to provide a simple way of configuring Spring Security to be stateless.
Maven
<dependencies>
<dependency>
<groupId>com.github.shiver-me-timbers</groupId>
<artifactId>smt-spring-security-stateless</artifactId>
<version>2.0</version>
</dependency>
</dependencies>
Usage
To register and customise the stateless configuration you must create a configuration class that extends the StatelessWebSecurityConfigurerAdapter.
@Configuration
public class SecurityConfiguration extends StatelessWebSecurityConfigurerAdapter {
}
Any further Spring Security configuration must be done in this configuration class through overriding the configureFurther(HttpSecurity) method. Configuring Spring Security in the traditional way by extending the WebSecurityConfigurerAdapter class and overriding its configure(HttpSecurity) method will break the stateless configuration.
@Configuration
public class SecurityConfiguration extends StatelessWebSecurityConfigurerAdapter {
@Override
protected void configureFurther(HttpSecurity http) throws Exception {
http.authorizeRequests().anyRequest().authenticated();
http.formLogin().loginPage("/signIn").permitAll();
http.logout().logoutUrl("/signOut").logoutSuccessUrl("/");
}
}
The stateless configuration it's self can be customised by overriding the other configure(...) and component methods in the StatelessWebSecurityConfigurerAdapter class.
Examples
A couple examples have been provide to show how to use this library.
smt-spring-security-stateless-basic
This example shows how to use the library with it's default configuration.
smt-spring-security-stateless-advanced
This example shows how you can customise the library to generate your own tokens and authentications.