Skip to content

Ability to disable anonymous authentication in RSocketSecurity #17132

@Aaur1s

Description

@Aaur1s

Expected Behavior

RSocketSecurity dsl should have ability to disable anonymous auth interceptor

Current Behavior

RSocketSecurity has hardcode in private method that adds anonymous interceptor no matter what

Context

I'm doing method-level security and rely on @PreAuthorize("authenticated"), my global security config has just permitAll. So anonymous authentication ruining my rsocket experience, for http security i can just disable it.
As workaround i constructed PayloadSocketAcceptorInterceptor entirely by hand, but this process is quite tedious, it would be nice to be able to disable it in RSocketSecurity dsl like in http.

Metadata

Metadata

Assignees

Labels

in: configAn issue in spring-security-configtype: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions