1
1
/*
2
- * Copyright 2002-2020 the original author or authors.
2
+ * Copyright 2002-2024 the original author or authors.
3
3
*
4
4
* Licensed under the Apache License, Version 2.0 (the "License");
5
5
* you may not use this file except in compliance with the License.
28
28
import org .springframework .security .web .DefaultSecurityFilterChain ;
29
29
import org .springframework .security .web .access .ExceptionTranslationFilter ;
30
30
import org .springframework .security .web .access .channel .ChannelProcessingFilter ;
31
+ import org .springframework .security .web .access .intercept .AuthorizationFilter ;
31
32
import org .springframework .security .web .access .intercept .FilterSecurityInterceptor ;
32
33
import org .springframework .security .web .authentication .AnonymousAuthenticationFilter ;
33
34
import org .springframework .security .web .authentication .UsernamePasswordAuthenticationFilter ;
38
39
import org .springframework .security .web .authentication .switchuser .SwitchUserFilter ;
39
40
import org .springframework .security .web .authentication .www .BasicAuthenticationFilter ;
40
41
import org .springframework .security .web .authentication .www .DigestAuthenticationFilter ;
42
+ import org .springframework .security .web .context .SecurityContextHolderFilter ;
41
43
import org .springframework .security .web .context .SecurityContextPersistenceFilter ;
44
+ import org .springframework .security .web .context .request .async .WebAsyncManagerIntegrationFilter ;
45
+ import org .springframework .security .web .csrf .CsrfFilter ;
46
+ import org .springframework .security .web .header .HeaderWriterFilter ;
42
47
import org .springframework .security .web .jaasapi .JaasApiIntegrationFilter ;
43
48
import org .springframework .security .web .savedrequest .RequestCacheAwareFilter ;
44
49
import org .springframework .security .web .servletapi .SecurityContextHolderAwareRequestFilter ;
45
50
import org .springframework .security .web .session .ConcurrentSessionFilter ;
46
51
import org .springframework .security .web .session .DisableEncodeUrlFilter ;
47
52
import org .springframework .security .web .session .ForceEagerSessionCreationFilter ;
48
53
import org .springframework .security .web .session .SessionManagementFilter ;
54
+ import org .springframework .web .filter .CorsFilter ;
49
55
50
56
/**
51
57
* @param <H>
@@ -127,15 +133,24 @@ public interface HttpSecurityBuilder<H extends HttpSecurityBuilder<H>>
127
133
* The ordering of the Filters is:
128
134
*
129
135
* <ul>
130
- * <li>{@link ForceEagerSessionCreationFilter}</li>
131
136
* <li>{@link DisableEncodeUrlFilter}</li>
137
+ * <li>{@link ForceEagerSessionCreationFilter}</li>
132
138
* <li>{@link ChannelProcessingFilter}</li>
139
+ * <li>{@link WebAsyncManagerIntegrationFilter}</li>
140
+ * <li>{@link SecurityContextHolderFilter}</li>
133
141
* <li>{@link SecurityContextPersistenceFilter}</li>
142
+ * <li>{@link HeaderWriterFilter}</li>
143
+ * <li>{@link CorsFilter}</li>
144
+ * <li>{@link CsrfFilter}</li>
134
145
* <li>{@link LogoutFilter}</li>
146
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter}</li>
147
+ * <li>{@link org.springframework.security.saml2.provider.service.web.Saml2WebSsoAuthenticationRequestFilter}</li>
135
148
* <li>{@link X509AuthenticationFilter}</li>
136
149
* <li>{@link AbstractPreAuthenticatedProcessingFilter}</li>
137
150
* <li><a href="
138
151
* {@docRoot}/org/springframework/security/cas/web/CasAuthenticationFilter.html">CasAuthenticationFilter</a></li>
152
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter}</li>
153
+ * <li>{@link org.springframework.security.saml2.provider.service.web.authentication.Saml2WebSsoAuthenticationFilter}</li>
139
154
* <li>{@link UsernamePasswordAuthenticationFilter}</li>
140
155
* <li>{@link OpenIDAuthenticationFilter}</li>
141
156
* <li>{@link org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter}</li>
@@ -149,9 +164,11 @@ public interface HttpSecurityBuilder<H extends HttpSecurityBuilder<H>>
149
164
* <li>{@link JaasApiIntegrationFilter}</li>
150
165
* <li>{@link RememberMeAuthenticationFilter}</li>
151
166
* <li>{@link AnonymousAuthenticationFilter}</li>
167
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter}</li>
152
168
* <li>{@link SessionManagementFilter}</li>
153
169
* <li>{@link ExceptionTranslationFilter}</li>
154
170
* <li>{@link FilterSecurityInterceptor}</li>
171
+ * <li>{@link AuthorizationFilter}</li>
155
172
* <li>{@link SwitchUserFilter}</li>
156
173
* </ul>
157
174
* @param filter the {@link Filter} to add
0 commit comments