Spring/spring-security-samples
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update HttpSecurity Formatting

Browse Source
This commit is contained in:
Josh Cummings
2021-11-10 09:42:09 -07:00
parent 3a4eec6eda
commit 3a58daf55d
27 changed files with 98 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
servlet/spring-boot/java/authentication/username-password/mfa/src/main/java/example/SecurityConfig.java
View File

@@ -44,19 +44,26 @@ public class SecurityConfig {
SecurityFilterChain web(HttpSecurity http,
AuthorizationManager<RequestAuthorizationContext> mfaAuthorizationManager) throws Exception {
MfaAuthenticationHandler mfaAuthenticationHandler = new MfaAuthenticationHandler("/second-factor");
http.authorizeHttpRequests((authz) -> authz.mvcMatchers("/second-factor", "/third-factor")
.access(mfaAuthorizationManager).anyRequest().authenticated())
.formLogin((form) -> form.successHandler(mfaAuthenticationHandler)
.failureHandler(mfaAuthenticationHandler))
.exceptionHandling((exceptions) -> exceptions
.withObjectPostProcessor(new ObjectPostProcessor<ExceptionTranslationFilter>() {
@Override
public <O extends ExceptionTranslationFilter> O postProcess(O filter) {
filter.setAuthenticationTrustResolver(new MfaTrustResolver());
return filter;
}
}));
// @formatter:off
http
.authorizeHttpRequests((authorize) -> authorize
.mvcMatchers("/second-factor", "/third-factor").access(mfaAuthorizationManager)
.anyRequest().authenticated()
)
.formLogin((form) -> form
.successHandler(mfaAuthenticationHandler)
.failureHandler(mfaAuthenticationHandler)
)
.exceptionHandling((exceptions) -> exceptions
.withObjectPostProcessor(new ObjectPostProcessor<ExceptionTranslationFilter>() {
@Override
public <O extends ExceptionTranslationFilter> O postProcess(O filter) {
filter.setAuthenticationTrustResolver(new MfaTrustResolver());
return filter;
}
})
);
// @formatter:on
return http.build();
}