-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Closed
Labels
in: configAn issue in spring-security-configAn issue in spring-security-configtype: enhancementA general enhancementA general enhancement
Description
Expected Behavior
RSocketSecurity dsl should have ability to disable anonymous auth interceptor
Current Behavior
RSocketSecurity has hardcode in private method that adds anonymous interceptor no matter what
Context
I'm doing method-level security and rely on @PreAuthorize("authenticated"), my global security config has just permitAll. So anonymous authentication ruining my rsocket experience, for http security i can just disable it.
As workaround i constructed PayloadSocketAcceptorInterceptor entirely by hand, but this process is quite tedious, it would be nice to be able to disable it in RSocketSecurity dsl like in http.
Metadata
Metadata
Assignees
Labels
in: configAn issue in spring-security-configAn issue in spring-security-configtype: enhancementA general enhancementA general enhancement