I am currently developing a API Authorization. So basically I have a filter JwtAuthorizationFilter. And in my RestController I want to annotate the request that should be filtered via @PreAuthorize(“hasRole(‘ADMIN’)”) for example. So my question is now: How do i have to setup the WebSe…
Tag: spring-security
Spring-Boot-Security: Custom Authenticator
I am starting with Spring-Boot and have an application with WebSecurity. Its working fine, I have InMemory Authentication with static user/passwords. Now I have no need for DB or LDAP or … But I want to build a custom authenticator that uses dynamic data (e.g. password has current time in it). How to im…
Unable to Run my Spring Security MVC WebApp SpringChainFilter throwing exception, rawPassword cannot be null
So I was trying to make a simple spring security hardcoded security just to check how my app is working before connecting it to the DB but before that it start showing me error 500. Here is my Configuration file Here is my webSecurity Configuration class with In memory authentication with some sample data. He…
Why I can StompCommand.CONNECT without JSESSIONID, but X-XSRF-TOKEN is required?
My goal is to secure a WebSocket endpoint e.g ws://localhost:8080/chat. What I did: I tried to create WebSocket connection with STOMP AbstractSecurityWebSocketMessageBrokerConfigurer WebSocketMessageBrokerConfigurer WebSecurityConfigurerAdapter My expected result is: The WebSocket connection should fail becau…
class org.springframework.security.core.userdetails.User cannot be cast
I use SpringSecurity in my web-project. When I try to login with username and password, I have this error in my stacktrace : Below, I will put classes where I think the problem comes from. Here my JwtUser.java : Here my AuthController.java : Here my UserDetailsServiceImpl.java : For information, I use java 11…
Multiple WebSecurityConfigurerAdapters: JWT authentication and form login in spring security
I have spring boot app with thymeleaf. I am using spring security formLogin method for security and now I need to add JWT for only some APIs. by doing this JWT is working fine as just I need but the formlogin has stopped and calling “/signInProcess” now give 404: NOTE: if I change the order and ma…
Spring boot security in kotlin with users and roles
I have to work on an application that old interns started. The backend is made with spring-boot and using Kotlin, which I’m very new to both. The backed is a RESTful API and I need to implement an authentication and authorizations to limit the access to specific users the CRUD methods. There’s bas…
i can’t figure out which component of the spring is doing this
10.5. AuthenticationManager AuthenticationManager is the API that defines how Spring Security’s Filters perform authentication. The Authentication that is returned is then set on the SecurityContextHolder by the controller (i.e. Spring Security’s Filterss) that invoked the AuthenticationManager. If you are no…
Gradle Login and signup page giving error in getUserAuthority() in CustomerUserDetailsService.java
The method getUserAuthority(java.util.Set<com.djamware.springsecuritymongodb.domain.Role>) in the type CustomUserDetailsService is not applicable for the arguments (java.util.Set<javax.management.relation.Role>) Why giving this error? This Java file is under package com.djamware.springsecuritymong…
spring boot security not configured properly
I am new to Spring boot and Spring boot security. However, using the existing sample codes, I had written a code which worked correctly. In my design, I had a separate page for my login, called login….