Class DefaultSecurityRuntime
java.lang.Object
com.emc.documentum.rest.context.jc.SecurityRuntimeBase
com.emc.documentum.rest.context.jc.DefaultSecurityRuntime
@Configuration
@PropertySource("classpath:rest-api-runtime.properties")
public class DefaultSecurityRuntime
extends com.emc.documentum.rest.context.jc.SecurityRuntimeBase
Default security runtime properties values.
Properties set in 'rest-api-runtime.properties' will override the default. Please refer to 'rest-api-runtime.properties.template'
for the detail explanation of runtime properties.
-
Field Summary
Modifier and TypeFieldDescriptionProperty value for 'rest.security.allowed.host.patterns'.Property value for 'rest.security.anonymous.url.patterns.'.Property value for 'rest.security.auth.mode'.Property value for 'rest.security.auth.urls'.boolean
Property value for 'rest.security.headers.cache_control.disabled'.Property value for "rest.security.client.token.cookie.samesite".Class<com.emc.documentum.rest.security.ticket.ClientTokenExpirationPolicy>
Property value for 'rest.security.client.token.expiration.policy'.Property value for 'rest.security.client.token.header'.Property value for 'rest.security.client.token.timeout'.boolean
Property value for 'rest.security.headers.content_type_options.disabled'.Property value for 'rest.security.crypto.algorithm'.Property value for 'rest.security.crypto.algorithm.parameters.class'.Property value for 'rest.security.crypto.block.size'.Property value for 'rest.security.crypto.key.salt'.Property value for 'rest.security.crypto.key.size'.Property value for 'rest.security.crypto.provider'.Property value for 'rest.security.crypto.provider.class'.Property value for 'rest.security.crypto.provider.force.replace'.Property value for 'rest.security.crypto.provider.jsafejce.mode'.Property value for 'rest.security.sso.fallback.auth.mode'.Property value for 'rest.security.headers.hsts.disabled'.Property value for 'rest.security.headers.hsts.include_sub_domains'.long
Property value for 'rest.security.headers.hsts.max_age_in_seconds'.Property value for 'rest.security.http_session.use'.Property value for 'rest.security.key.algorithm'.Property value for 'rest.security.consumer.https.keystore.password'.Property value for 'rest.security.consumer.https.keystore.path'.Property value for 'rest.security.logout.success.url'.Property value for 'rest.security.logout.supported.methods'.Property value for 'rest.security.logout.url'.Property value for 'rest.security.consumer.proxy.address'.Property value for 'rest.security.consumer.proxy.port'.Property value for 'rest.security.consumer.proxy.username'.Property value for 'rest.security.consumer.proxy.password'.Property value for 'rest.security.random.algorithm'.Property value for 'rest.security.realm.name'.Property value for 'rest.security.auth.root.url'.boolean
Property value for 'rest.security.spring.httpfirewall.disable'.Property value for "rest.security.sso.login.success.url.whitelist".boolean
Property value for 'rest.security.headers.x_frame_options.disabled'.Property value for 'rest.security.headers.x_frame_options.policy'.boolean
Property value for 'rest.security.headers.xss_protection.block'.boolean
Property value for 'rest.security.headers.xss_protection.disabled'.boolean
Property value for 'rest.security.headers.xss_protection.explicit_enable'. -
Constructor Summary
-
Method Summary
Methods inherited from class com.emc.documentum.rest.context.jc.SecurityRuntimeBase
propertyPlaceholderConfigurer
-
Field Details
-
authMode
Property value for 'rest.security.auth.mode'. Defaults to 'basic'. -
fallbackAuthMode
Property value for 'rest.security.sso.fallback.auth.mode'. Defaults to empty -
rootAuthUrl
Property value for 'rest.security.auth.root.url'. Defaults to '/repositories/**'. -
authUrls
Property value for 'rest.security.auth.urls'. Defaults to '/search*'. -
realmName
Property value for 'rest.security.realm.name'. Defaults to 'com.emc.documentum.rest'. -
logoutUrl
Property value for 'rest.security.logout.url'. Defaults to '/logout'. -
logoutSuccessUrl
Property value for 'rest.security.logout.success.url'. Defaults to '/services'. -
cryptoAlgorithm
Property value for 'rest.security.crypto.algorithm'. Defaults to 'AES/CBC/PKCS5Padding'. -
cryptoAlgorithmParametersClass
@Value("${rest.security.crypto.algorithm.parameters.class:}") public String cryptoAlgorithmParametersClassProperty value for 'rest.security.crypto.algorithm.parameters.class'. Defaults to empty. -
cryptoProvider
Property value for 'rest.security.crypto.provider'. Defaults to empty (JVM provider). -
cryptoProviderClass
Property value for 'rest.security.crypto.provider.class'. Defaults to empty. -
cryptoProviderForceReplace
@Value("${rest.security.crypto.provider.force.replace:false}") public String cryptoProviderForceReplaceProperty value for 'rest.security.crypto.provider.force.replace'. Defaults to 'false'. -
cryptoProviderJsafeJCEMode
Property value for 'rest.security.crypto.provider.jsafejce.mode'. Defaults to empty. -
cryptoKeySize
Property value for 'rest.security.crypto.key.size'. Defaults to '0'. -
cryptoKeySalt
Property value for 'rest.security.crypto.key.salt'. Defaults to empty. -
cryptoBlockSize
Property value for 'rest.security.crypto.block.size'. Defaults to '0'. -
randomAlgorithm
Property value for 'rest.security.random.algorithm'. Defaults to 'SHA1PRNG'. -
keyAlgorithm
Property value for 'rest.security.key.algorithm'. Defaults to empty. -
clientTokenHeader
Property value for 'rest.security.client.token.header'. Defaults is empty. -
clientTokenExpirationPolicy
@Value("${rest.security.client.token.expiration.policy:com.emc.documentum.rest.security.ticket.impl.TolerantTimeoutExpirationPolicy}") public Class<com.emc.documentum.rest.security.ticket.ClientTokenExpirationPolicy> clientTokenExpirationPolicyProperty value for 'rest.security.client.token.expiration.policy'. Defaults to 'com.emc.documentum.rest.security.ticket.impl.TolerantTimeoutExpirationPolicy'. -
clientTokenCookieScoped
-
clientTokenTimeoutInSeconds
Property value for 'rest.security.client.token.timeout'. Defaults to '3600'. -
getClientTokenSessionCookie
@Value("${rest.security.client.token.session.cookie:false}") public Boolean getClientTokenSessionCookie -
clientTokenCookieSameSite
Property value for "rest.security.client.token.cookie.samesite". Defaults to empty. -
hstsDisabled
Property value for 'rest.security.headers.hsts.disabled'. Defaults to 'false'. -
hstsIncludeSubDomains
@Value("${rest.security.headers.hsts.include_sub_domains:true}") public Boolean hstsIncludeSubDomainsProperty value for 'rest.security.headers.hsts.include_sub_domains'. Defaults to 'true'. -
hstsMaxAgeInSeconds
@Value("${rest.security.headers.hsts.max_age_in_seconds:31536000}") public long hstsMaxAgeInSecondsProperty value for 'rest.security.headers.hsts.max_age_in_seconds'. Defaults to one year. -
cacheControlDisabled
@Value("${rest.security.headers.cache_control.disabled:false}") public boolean cacheControlDisabledProperty value for 'rest.security.headers.cache_control.disabled'. Defaults to 'false'. -
contentTypeOptionsDisabled
@Value("${rest.security.headers.content_type_options.disabled:false}") public boolean contentTypeOptionsDisabledProperty value for 'rest.security.headers.content_type_options.disabled'. Defaults to 'false'. -
xFrameOptionsDisabled
@Value("${rest.security.headers.x_frame_options.disabled:false}") public boolean xFrameOptionsDisabledProperty value for 'rest.security.headers.x_frame_options.disabled'. Defaults to 'false'. -
xFrameOptionsPolicy
Property value for 'rest.security.headers.x_frame_options.policy'. Defaults to 'DENY'. -
xssProtectionDisabled
@Value("${rest.security.headers.xss_protection.disabled:false}") public boolean xssProtectionDisabledProperty value for 'rest.security.headers.xss_protection.disabled'. Defaults to 'false'. -
xssProtectionExplicitEnable
@Value("${rest.security.headers.xss_protection.explicit_enable:true}") public boolean xssProtectionExplicitEnableProperty value for 'rest.security.headers.xss_protection.explicit_enable'. Defaults to 'true'. -
xssProtectionBlock
@Value("${rest.security.headers.xss_protection.block:true}") public boolean xssProtectionBlockProperty value for 'rest.security.headers.xss_protection.block'. Defaults to 'true'. -
httpSessionUse
Property value for 'rest.security.http_session.use'. Defaults to 'STATELESS'. -
anonymousPatterns
Property value for 'rest.security.anonymous.url.patterns.'. Support multiple values. Separate two patterns with comma. -
logoutSupportedMethods
Property value for 'rest.security.logout.supported.methods'. Defaults to 'GET,POST' Support multiple values, separated by comma. -
ssoLoginSuccessUrlWhitelist
@Value("${rest.security.sso.login.success.url.whitelist:/.*}") public String ssoLoginSuccessUrlWhitelistProperty value for "rest.security.sso.login.success.url.whitelist". Default to '/.*' -
springHttpFirewallDisable
@Value("${rest.security.spring.httpfirewall.disable:true}") public boolean springHttpFirewallDisableProperty value for 'rest.security.spring.httpfirewall.disable'. Defaults to 'true'. -
allowedHostPatterns
Property value for 'rest.security.allowed.host.patterns'. Defaults to empty. -
proxyAddress
Property value for 'rest.security.consumer.proxy.address'. Defaults to empty. -
proxyPort
Property value for 'rest.security.consumer.proxy.port'. Defaults to 80. -
proxyUsername
Property value for 'rest.security.consumer.proxy.username'. Defaults to empty. -
proxyUserPassword
Property value for 'rest.security.consumer.proxy.password'. Defaults to empty. -
keystorePath
Property value for 'rest.security.consumer.https.keystore.path'. Defaults to empty. -
keystorePassword
Property value for 'rest.security.consumer.https.keystore.password'. Defaults to empty.
-
-
Constructor Details
-
DefaultSecurityRuntime
public DefaultSecurityRuntime()
-