|
13 | 13 | * See the License for the specific language governing permissions and |
14 | 14 | * limitations under the License. |
15 | 15 | */ |
| 16 | +//CHECKSTYLE:OFF |
16 | 17 | package org.springframework.grpc.autoconfigure.server.security; |
17 | 18 |
|
18 | 19 | import org.springframework.boot.autoconfigure.AutoConfiguration; |
| 20 | +import org.springframework.boot.autoconfigure.condition.ConditionalOnBean; |
19 | 21 | import org.springframework.boot.autoconfigure.condition.ConditionalOnClass; |
| 22 | +import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean; |
20 | 23 | import org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration; |
| 24 | +import org.springframework.context.ApplicationContext; |
| 25 | +import org.springframework.context.annotation.Bean; |
| 26 | +import org.springframework.context.annotation.Conditional; |
| 27 | +import org.springframework.context.annotation.Configuration; |
21 | 28 | import org.springframework.context.annotation.Import; |
22 | 29 | import org.springframework.grpc.autoconfigure.server.ConditionalOnGrpcServerEnabled; |
| 30 | +import org.springframework.grpc.autoconfigure.server.GrpcServerExecutorProvider; |
| 31 | +import org.springframework.grpc.autoconfigure.server.GrpcServerFactoryAutoConfiguration; |
23 | 32 | import org.springframework.grpc.autoconfigure.server.exception.GrpcExceptionHandlerAutoConfiguration; |
| 33 | +import org.springframework.grpc.server.GlobalServerInterceptor; |
| 34 | +import org.springframework.grpc.server.exception.GrpcExceptionHandler; |
| 35 | +import org.springframework.grpc.server.security.GrpcSecurity; |
| 36 | +import org.springframework.grpc.server.security.SecurityContextServerInterceptor; |
| 37 | +import org.springframework.grpc.server.security.SecurityGrpcExceptionHandler; |
| 38 | +import org.springframework.security.concurrent.DelegatingSecurityContextExecutor; |
24 | 39 | import org.springframework.security.config.ObjectPostProcessor; |
| 40 | +import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; |
| 41 | +import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration; |
| 42 | +import org.springframework.security.web.SecurityFilterChain; |
| 43 | + |
| 44 | +import io.grpc.internal.GrpcUtil; |
25 | 45 |
|
26 | 46 | @ConditionalOnClass(ObjectPostProcessor.class) |
27 | 47 | @ConditionalOnGrpcServerEnabled |
|
31 | 51 | public class GrpcSecurityAutoConfiguration { |
32 | 52 |
|
33 | 53 | } |
| 54 | + |
| 55 | +@Configuration(proxyBeanMethods = false) |
| 56 | +@Import(AuthenticationConfiguration.class) |
| 57 | +class ExceptionHandlerAutoConfiguration { |
| 58 | + |
| 59 | + @Bean |
| 60 | + public GrpcExceptionHandler accessExceptionHandler() { |
| 61 | + return new SecurityGrpcExceptionHandler(); |
| 62 | + } |
| 63 | + |
| 64 | +} |
| 65 | + |
| 66 | +@ConditionalOnBean(ObjectPostProcessor.class) |
| 67 | +@Configuration(proxyBeanMethods = false) |
| 68 | +@Conditional(GrpcServerFactoryAutoConfiguration.OnNativeGrpcServerCondition.class) |
| 69 | +class GrpcNativeSecurityConfigurerAutoConfiguration { |
| 70 | + |
| 71 | + @Bean |
| 72 | + public GrpcSecurity grpcSecurity(ObjectPostProcessor<Object> objectPostProcessor, |
| 73 | + AuthenticationConfiguration authenticationConfiguration, ApplicationContext context) throws Exception { |
| 74 | + AuthenticationManagerBuilder authenticationManagerBuilder = authenticationConfiguration |
| 75 | + .authenticationManagerBuilder(objectPostProcessor, context); |
| 76 | + authenticationManagerBuilder |
| 77 | + .parentAuthenticationManager(authenticationConfiguration.getAuthenticationManager()); |
| 78 | + return new GrpcSecurity(objectPostProcessor, authenticationManagerBuilder, context); |
| 79 | + } |
| 80 | + |
| 81 | +} |
| 82 | + |
| 83 | +@ConditionalOnBean(SecurityFilterChain.class) |
| 84 | +@Conditional(GrpcServerFactoryAutoConfiguration.OnGrpcServletCondition.class) |
| 85 | +@Configuration(proxyBeanMethods = false) |
| 86 | +class GrpcServletSecurityConfigurerAutoConfiguration { |
| 87 | + |
| 88 | + @Bean |
| 89 | + @GlobalServerInterceptor |
| 90 | + public SecurityContextServerInterceptor securityContextInterceptor() { |
| 91 | + return new SecurityContextServerInterceptor(); |
| 92 | + } |
| 93 | + |
| 94 | + @Bean |
| 95 | + @ConditionalOnMissingBean(GrpcServerExecutorProvider.class) |
| 96 | + public GrpcServerExecutorProvider grpcServerExecutorProvider() { |
| 97 | + return () -> new DelegatingSecurityContextExecutor(GrpcUtil.SHARED_CHANNEL_EXECUTOR.create()); |
| 98 | + } |
| 99 | + |
| 100 | +} |
| 101 | +// CHECKSTYLE:ON |
0 commit comments