From f5d118595e5c41747fc9acb702ba912162cacd6f Mon Sep 17 00:00:00 2001 From: Hendrik Ebbers Date: Thu, 15 Jun 2017 12:57:10 +0200 Subject: [PATCH] documentation added --- .../topics/oidc/java/spring-security-adapter.adoc | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/securing_apps/topics/oidc/java/spring-security-adapter.adoc b/securing_apps/topics/oidc/java/spring-security-adapter.adoc index 4eb5e2188c..c21ce6d756 100755 --- a/securing_apps/topics/oidc/java/spring-security-adapter.adoc +++ b/securing_apps/topics/oidc/java/spring-security-adapter.adoc @@ -36,9 +36,7 @@ While its use is not required, it greatly simplifies your security context confi ---- -@Configuration -@EnableWebSecurity -@ComponentScan(basePackageClasses = KeycloakSecurityComponents.class) +@KeycloakConfiguration public class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter { /** @@ -76,6 +74,11 @@ You must provide a session authentication strategy bean which should be of type Spring Security's `SessionFixationProtectionStrategy` is currently not supported because it changes the session identifier after login via Keycloak. If the session identifier changes, universal log out will not work because Keycloak is unaware of the new session identifier. +TIP: The `@KeycloakConfiguration` annotation is a metadata annotion that defines all annotations that are needed to integrate +KeyCloak in Spring security. If you have a complexe Spring security setup you can simply have a look ath the annotations of +the `@KeycloakConfiguration` annotation and create your own custom meta annotation or just use specific Spring annotations +for the KeyCloak adapter. + ====== XML Configuration While Spring Security's XML namespace simplifies configuration, customizing the configuration can be a bit verbose.