smt-spring-security-stateless

The purpose of this library is to provide a simple way of configuring Spring Security to be stateless.

Maven

<dependencies>
    <dependency>
        <groupId>com.github.shiver-me-timbers</groupId>
        <artifactId>smt-spring-security-stateless</artifactId>
        <version>2.0</version>
    </dependency>
</dependencies>

Usage

To register and customise the stateless configuration you must create a configuration class that extends the StatelessWebSecurityConfigurerAdapter.

@Configuration
public class SecurityConfiguration extends StatelessWebSecurityConfigurerAdapter {
}

Any further Spring Security configuration must be done in this configuration class through overriding the configureFurther(HttpSecurity) method. Configuring Spring Security in the traditional way by extending the WebSecurityConfigurerAdapter class and overriding its configure(HttpSecurity) method will break the stateless configuration.

@Configuration
public class SecurityConfiguration extends StatelessWebSecurityConfigurerAdapter {
    @Override
    protected void configureFurther(HttpSecurity http) throws Exception {
        http.authorizeRequests().anyRequest().authenticated();
        http.formLogin().loginPage("/signIn").permitAll();
        http.logout().logoutUrl("/signOut").logoutSuccessUrl("/");
    }
}

The stateless configuration it's self can be customised by overriding the other configure(...) and component methods in the StatelessWebSecurityConfigurerAdapter class.

Examples

A couple examples have been provide to show how to use this library.

smt-spring-security-stateless-basic

This example shows how to use the library with it's default configuration.

smt-spring-security-stateless-advanced

This example shows how you can customise the library to generate your own tokens and authentications.