All Classes and Interfaces
Class
Description
Add an implementation of this class as @Bean to the ApplicationContext to be able to handle successful authentication.
Implement this abstract class to configure for local user authentication storage.
Authentication implementation that is based on a user object.
This controller implements the default /authentication and /authentication/current endpoints.
Interface representing the json result object of the authentication endpoints.
Provide an implementation as
Bean
to the ApplicationContext
to customize
the returned JSON of the default authentication endpoints.Use this annotation on a controller method parameter to resolve the current logged in user.
REST errorhandler that sets given http status and writes given errorCode as json object to the http response.
Represents the json object that is set as http response body when an exception is thrown.
Implement this interface and add it to the
ApplicationContext
to be able to customize the HttpSecurity
object.An
DaoAuthenticationProvider
that supports Multi-Factor authentication (MFA, 2FA) using Time-based One-Time-Password (TOTP).An
UsernamePasswordAuthenticationToken
that also accepts a verification code (e.g.Auto-configures beans for MFA validation and configuration.
A
GenericFilterBean
that denies requests when the user is obliged to set up MFA but hasn't done so.Service which contains logic to set up MFA authentication
Service which contains logic to validate MFA tokens.
Let your custom user object implement this interface.
Implement this interface and add it as
Bean
to the ApplicationContext
to customize the auto configured url registry.Handles all authentication- and authorization exceptions that can occur in the http web environment.
Handles the login POST request.
Wraps the custom user object and will be available as principal on the
Authentication
in the SecurityContext
.Default error handler that handles
AccessDeniedException
thrown when a method security check fails.Auto-configures Spring Web Security with a customized UserDetailsService for internal users storage or with crowd-integration-springsecurity for external crowd authentication.