Spring Security to authorize Cognito users.

Pragya Keshap answered on February 28, 2023 Popularity 1/10 Helpfulness 1/10

answer Spring Security to authorize Cognito users.

Spring Security to authorize Cognito users.

Comment

@EnableWebFluxSecurity
@EnableReactiveMethodSecurity
public class JwtAuthenticationConfig {

    private static final String[] WHITELISTED_AUTH_URLS = {
            "/v3/api-docs/**",
            "/swagger-ui/**",
            "/webjars/**",
            "/swagger-ui.html",
            "/user/signup",
    };

    @Bean
    public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {

        return http
                .csrf().disable()
                .authorizeExchange()
                .pathMatchers(WHITELISTED_AUTH_URLS)
                .permitAll()
                .and()
                .authorizeExchange(expressionInterceptUrlRegistry ->
                        expressionInterceptUrlRegistry.anyExchange().authenticated())
                .oauth2ResourceServer()
                .jwt(jwt -> jwt.jwtAuthenticationConverter(grantedAuthoritiesExtractor()))
                .and().build();
    }

    private Converter<Jwt, Mono<AbstractAuthenticationToken>> grantedAuthoritiesExtractor() {
        JwtAuthenticationConverter jwtAuthenticationConverter = new JwtAuthenticationConverter();
        jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter(jwt -> {
            Collection<?> authorities = (Collection<?>) jwt.getClaims().getOrDefault("cognito:groups", Collections.emptyList());
            return authorities.stream()
                    .map(Object::toString)
                    .map(SimpleGrantedAuthority::new)
                    .collect(Collectors.toList());
        });
        return new ReactiveJwtAuthenticationConverterAdapter(jwtAuthenticationConverter);
    }
}

Popularity 1/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: authorize cognito java spring-security

Link to this answer
Share Copy Link

Contributed on Feb 28 2023

Pragya Keshap

0 Answers Avg Quality 2/10

Spring Security to authorize Cognito users.

Contents

More Related Answers

Spring Security to authorize Cognito users.

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.