Spring Security to authorize Cognito users.

Pragya Keshap answered on February 28, 2023 Popularity 1/10 Helpfulness 1/10

answer Spring Security to authorize Cognito users.

Spring Security to authorize Cognito users.

Comment

@EnableWebFluxSecurity
@EnableReactiveMethodSecurity
public class JwtAuthenticationConfig {

    private static final String[] WHITELISTED_AUTH_URLS = {
            "/v3/api-docs/**",
            "/swagger-ui/**",
            "/webjars/**",
            "/swagger-ui.html",
            "/user/signup",
    };

    @Bean
    public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {

        return http
                .csrf().disable()
                .authorizeExchange()
                .pathMatchers(WHITELISTED_AUTH_URLS)
                .permitAll()
                .and()
                .authorizeExchange(expressionInterceptUrlRegistry ->
                        expressionInterceptUrlRegistry.anyExchange().authenticated())
                .oauth2ResourceServer()
                .jwt(jwt -> jwt.jwtAuthenticationConverter(grantedAuthoritiesExtractor()))
                .and().build();
    }

    private Converter<Jwt, Mono<AbstractAuthenticationToken>> grantedAuthoritiesExtractor() {
        JwtAuthenticationConverter jwtAuthenticationConverter = new JwtAuthenticationConverter();
        jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter(jwt -> {
            Collection<?> authorities = (Collection<?>) jwt.getClaims().getOrDefault("cognito:groups", Collections.emptyList());
            return authorities.stream()
                    .map(Object::toString)
                    .map(SimpleGrantedAuthority::new)
                    .collect(Collectors.toList());
        });
        return new ReactiveJwtAuthenticationConverterAdapter(jwtAuthenticationConverter);
    }
}

Popularity 1/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: authorize cognito java spring-security

Link to this answer
Share Copy Link

Contributed on Feb 28 2023

Pragya Keshap

0 Answers Avg Quality 2/10

Continue with Google

By continuing, I agree that I have read and agree to Greppers's Terms of Service and Privacy Policy.

Spring Security to authorize Cognito users.

Contents

More Related Answers

Spring Security to authorize Cognito users.

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.