SEC-2788: Add @Configuration as meta annotation to @Enable* annotations

This commit is contained in:
Rob Winch
2014-12-08 16:06:58 -06:00
parent 11116c2b80
commit 3171cc4364
99 changed files with 11 additions and 240 deletions

View File

@@ -55,7 +55,6 @@ import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.configuration.*;
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

View File

@@ -54,7 +54,6 @@ We will want to ensure we compensate for overriding these defaults in our update
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@@ -101,7 +100,6 @@ To fix this we need to instruct Spring Security to allow anyone to access the */
----
// ...
@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@@ -212,7 +210,6 @@ We need to update our configuration to allow anyone to access our resources and
----
// ...
@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

View File

@@ -118,7 +118,6 @@ If you try to log out right now the request will fail. The reason is that Spring
----
import org.springframework.security.config.annotation.web.servlet.configuration.*;
@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
----

View File

@@ -418,7 +418,6 @@ import org.springframework.context.annotation.*;
import org.springframework.security.config.annotation.authentication.builders.*;
import org.springframework.security.config.annotation.web.configuration.*;
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@@ -756,7 +755,6 @@ We can configure multiple HttpSecurity instances just as we can have multiple `<
[source,java]
----
@Configuration
@EnableWebSecurity
public class MultiHttpSecurityConfig {
@Autowired
@@ -812,7 +810,6 @@ We can enable annotation-based security using the `@EnableGlobalMethodSecurity`
[source,java]
----
@Configuration
@EnableGlobalMethodSecurity(securedEnabled = true)
public class MethodSecurityConfig {
// ...
@@ -840,7 +837,6 @@ Support for JSR-250 annotations can be enabled using
[source,java]
----
@Configuration
@EnableGlobalMethodSecurity(jsr250Enabled = true)
public class MethodSecurityConfig {
// ...
@@ -851,7 +847,6 @@ These are standards-based and allow simple role-based constraints to be applied
[source,java]
----
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class MethodSecurityConfig {
// ...
@@ -881,7 +876,6 @@ Sometimes you may need to perform operations that are more complicated than are
[source,java]
----
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class MethodSecurityConfig extends GlobalMethodSecurityConfiguration {
@Override
@@ -3097,7 +3091,6 @@ CSRF protection is enabled by default with Java configuration. If you would like
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3217,7 +3210,6 @@ If you really want to use HTTP GET with logout you can do so, but remember this
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3352,7 +3344,6 @@ If you are using Spring Security's Java configuration, all of the default securi
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3370,7 +3361,6 @@ As soon as you specify any headers that should be included, then only those head
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3414,7 +3404,6 @@ Similarly, you can enable only cache control within Java Configuration with the
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3485,7 +3474,6 @@ The X-Content-Type-Options header is added by default with Spring Security Java
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3537,7 +3525,6 @@ Similarly, you can enable only HSTS headers with Java Configuration:
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3587,7 +3574,6 @@ Similarly, you can enable only frame options within Java Configuration with the
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3632,7 +3618,6 @@ Similarly, you can enable only xss protection within Java Configuration with the
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3679,7 +3664,6 @@ Similarly, the headers could be added to the response using Java Configuration a
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3724,7 +3708,6 @@ We could also restrict framing of content to the same origin with Java configura
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -3775,7 +3758,6 @@ We could also prevent framing of content to the log in page using java configura
[source,java]
----
@EnableWebSecurity
@Configuration
public class WebSecurityConfig extends
WebSecurityConfigurerAdapter {
@@ -5969,7 +5951,6 @@ To enable Spring Security integration with Spring MVC add the `@EnableWebMvcSecu
[source,java]
----
@Configuration
@EnableWebMvcSecurity
public class SecurityConfig {
// ...