#309: SpringSecurityConfig.kt

Estructura del código

Anotaciones: Bean, Configuration, Throws, Override

Clases: SpringSecurityConfig

Beans de Spring: allowWebDavMethodsFirewall, passwordEncoder

Funciones (4): securityFilterChain, allowWebDavMethodsFirewall, userDetailsService, passwordEncoder

Propiedades (2): firewall, manager

Importaciones: 13 paquetes

Paquete: org.projectforge.security

Código fuente (resumido)

package org.projectforge.security

import org.projectforge.framework.utils.NumberHelper
import org.springframework.context.annotation.Bean
import org.springframework.context.annotation.Configuration
import org.springframework.security.config.Customizer
import org.springframework.security.config.annotation.web.builders.HttpSecurity
import org.springframework.security.core.userdetails.User
import org.springframework.security.core.userdetails.UserDetailsService
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder
import org.springframework.security.crypto.password.PasswordEncoder
import org.springframework.security.provisioning.InMemoryUserDetailsManager
import org.springframework.security.web.SecurityFilterChain
import org.springframework.security.web.firewall.HttpFirewall
import org.springframework.security.web.firewall.StrictHttpFirewall


@Configuration
open class SpringSecurityConfig {
    @Bean
    @Throws(Exception::class)
    open fun securityFilterChain(http: HttpSecurity, firewall: HttpFirewall): SecurityFilterChain {
        http
            .authorizeHttpRequests(Customizer { authorize ->
                authorize
                    .anyRequest().permitAll()
            } // Permitir todas las solicitudes sin autenticación
            )
            .csrf({ csrf -> csrf.disable() }) // CSRF lo gestiona PF.
        // Configurar el firewall para permitir métodos WebDAV:
        http.setSharedObject(HttpFirewall::class.java, firewall)
        return http.build()
    }

    @Bean
    open fun allowWebDavMethodsFirewall(): HttpFirewall {
        val firewall = StrictHttpFirewall()
        // Permitir explícitamente métodos HTTP para WebDAV
        firewall.setAllowedHttpMethods(
            listOf(
                "GET", "POST", "PUT", "DELETE", "OPTIONS", "HEAD",
                "PROPFIND", "REPORT", //"PROPPATCH", "MKCOL", "COPY", "MOVE",
                //"LOCK", "UNLOCK", "REPORT"
            )
        )
        return firewall
    }

    @Bean
    @Override
    open fun userDetailsService(): UserDetailsService {
        /**
         * La contraseña se genera aleatoriamente y no se almacena en la base de datos.
         * Los usuarios no son compatibles; una contraseña aleatoria es mejor que una predeterminada, por si acaso.
         */
        val manager = InMemoryUserDetailsManager();
        manager.createUser(
            User.withUsername("usuario")
                .password(passwordEncoder().encode(NumberHelper.getSecureRandomAlphanumeric(20)))
                .roles("USER")
                .build()
        );
        return manager;
    }

    @Bean
    open fun passwordEncoder(): PasswordEncoder {
        return BCryptPasswordEncoder();
    }
}

Historial de Git

868d6abb7 2025 -> 2026
63081666f Encabezados de archivos fuente: 2024-> 2025.
953455ae5 WIP: Carddav
7f2c255ae WIP: CardDav
921638f43 WIP