Spring Security 4.2.3 Config to handle Pre-Authenticated and Non Pre-Authenticated Requests
Existing Spring MVC, Spring Security application.
- Internal traffic is currently pre-authenticated and sent to application
- External traffic is also pre-authenticated by another authentication system before its sent to the application.
- Both are currently handled by a single
springSecurityFilterChainand the custom checks are done in the filter class that extendsAbstractPreAuthenticatedProcessingFilter
New Requirement
- External internet traffic come pre-authenticated as before.
- Internal traffic has to be authenticated via another system, however it has to be triggered from the application itself.
How do I setup the spring security for this?
Any inputs around this?
The internal request authentication system can be triggered from Servlet filter only and does not have spring security based trigger.
java spring java-ee spring-security
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
add a comment |
Existing Spring MVC, Spring Security application.
- Internal traffic is currently pre-authenticated and sent to application
- External traffic is also pre-authenticated by another authentication system before its sent to the application.
- Both are currently handled by a single
springSecurityFilterChainand the custom checks are done in the filter class that extendsAbstractPreAuthenticatedProcessingFilter
New Requirement
- External internet traffic come pre-authenticated as before.
- Internal traffic has to be authenticated via another system, however it has to be triggered from the application itself.
How do I setup the spring security for this?
Any inputs around this?
The internal request authentication system can be triggered from Servlet filter only and does not have spring security based trigger.
java spring java-ee spring-security
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a customAuthenticationProviderand plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.
– M. Deinum
Nov 15 '18 at 12:15
add a comment |
Existing Spring MVC, Spring Security application.
- Internal traffic is currently pre-authenticated and sent to application
- External traffic is also pre-authenticated by another authentication system before its sent to the application.
- Both are currently handled by a single
springSecurityFilterChainand the custom checks are done in the filter class that extendsAbstractPreAuthenticatedProcessingFilter
New Requirement
- External internet traffic come pre-authenticated as before.
- Internal traffic has to be authenticated via another system, however it has to be triggered from the application itself.
How do I setup the spring security for this?
Any inputs around this?
The internal request authentication system can be triggered from Servlet filter only and does not have spring security based trigger.
java spring java-ee spring-security
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
Existing Spring MVC, Spring Security application.
- Internal traffic is currently pre-authenticated and sent to application
- External traffic is also pre-authenticated by another authentication system before its sent to the application.
- Both are currently handled by a single
springSecurityFilterChainand the custom checks are done in the filter class that extendsAbstractPreAuthenticatedProcessingFilter
New Requirement
- External internet traffic come pre-authenticated as before.
- Internal traffic has to be authenticated via another system, however it has to be triggered from the application itself.
How do I setup the spring security for this?
Any inputs around this?
The internal request authentication system can be triggered from Servlet filter only and does not have spring security based trigger.
java spring java-ee spring-security
java spring java-ee spring-security
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
edited Nov 15 '18 at 12:13
M. Deinum
68.8k12138148
68.8k12138148
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
asked Nov 15 '18 at 12:10
Vikranth DVikranth D
1
1
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a customAuthenticationProviderand plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.
– M. Deinum
Nov 15 '18 at 12:15
add a comment |
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a customAuthenticationProviderand plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.
– M. Deinum
Nov 15 '18 at 12:15
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a custom
AuthenticationProvider and plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.– M. Deinum
Nov 15 '18 at 12:15
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a custom
AuthenticationProvider and plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.– M. Deinum
Nov 15 '18 at 12:15
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53319219%2fspring-security-4-2-3-config-to-handle-pre-authenticated-and-non-pre-authenticat%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53319219%2fspring-security-4-2-3-config-to-handle-pre-authenticated-and-non-pre-authenticat%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Configure it. That is basically all there is to it. The pre-authentication is already in place, another filter takes care of the other authentication mechanism. If that is just username/password (or basic or) Spring Security provides it out-of-the-box. The other system can be implemented through a custom
AuthenticationProviderand plugged into every authentication method (pre-auth, username.password etc.) you like to use. However there currently is too little information to help you any further.– M. Deinum
Nov 15 '18 at 12:15