Class NoopSecurityFilterChain

java.lang.Object
org.frankframework.lifecycle.servlets.NoopSecurityFilterChain
All Implemented Interfaces:
org.springframework.security.web.SecurityFilterChain

public class NoopSecurityFilterChain extends Object implements org.springframework.security.web.SecurityFilterChain
Since Spring 6, the `@EnableWebSecurity` annotation seems to be adding a default SecurityFilterChain, if not exist yet. This in combination with the WebSecurityConfigurer allows the user to configure this default SecurityFilterChain. We are misusing the configurer to dynamically add new SecurityFilterChains, which we create between the INIT and CONFIGURE phase. This class exist solely to make Spring not create it's own default SecurityFilterChain, but rather our 'default'. This FilterChain exists of exactly 0 filters, making it a NOOP. Spring is clever enough to not configure this chain in a DelegatingFilterProxy since it does not have any filters.
Author:
Niels Meijer
  • Constructor Details

    • NoopSecurityFilterChain

      public NoopSecurityFilterChain()
  • Method Details

    • matches

      public boolean matches(jakarta.servlet.http.HttpServletRequest request)
      Specified by:
      matches in interface org.springframework.security.web.SecurityFilterChain
    • getFilters

      public List<jakarta.servlet.Filter> getFilters()
      Specified by:
      getFilters in interface org.springframework.security.web.SecurityFilterChain