137 lines
6.2 KiB
XML
Executable File
137 lines
6.2 KiB
XML
Executable File
<!--
|
|
~ Copyright © 2005 - 2018 TIBCO Software Inc.
|
|
~ http://www.jaspersoft.com.
|
|
~
|
|
~ This program is free software: you can redistribute it and/or modify
|
|
~ it under the terms of the GNU Affero General Public License as published by
|
|
~ the Free Software Foundation, either version 3 of the License, or
|
|
~ (at your option) any later version.
|
|
~
|
|
~ This program is distributed in the hope that it will be useful,
|
|
~ but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
~ GNU Affero General Public License for more details.
|
|
~
|
|
~ You should have received a copy of the GNU Affero General Public License
|
|
~ along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
-->
|
|
|
|
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd">
|
|
|
|
<!--
|
|
- Sample configuration for users to implement in cases where there is no need for a login page. i.e. Windows active directory.
|
|
This implementation authenticates any request and gives EVEN OR ODDS role according to the IP.
|
|
|
|
-->
|
|
|
|
<bean id="proxyAuthenticationProcessingFilter" class="com.jaspersoft.jasperserver.api.security.externalAuth.custom.CustomAuthenticationProcessingFilter"
|
|
parent="authenticationProcessingFilter">
|
|
<property name="authenticationManager">
|
|
<ref local="customAuthenticationManager"/>
|
|
</property>
|
|
<property name="authenticationSuccessHandler" ref="externalAuthSuccessHandler" />
|
|
</bean>
|
|
|
|
<bean id="externalAuthSuccessHandler"
|
|
class="com.jaspersoft.jasperserver.api.security.externalAuth.JrsExternalAuthenticationSuccessHandler" parent="successHandler">
|
|
<property name="externalDataSynchronizer">
|
|
<ref local="externalDataSynchronizer"/>
|
|
</property>
|
|
</bean>
|
|
|
|
<bean id="proxyExceptionTranslationFilter" class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.JSExceptionTranslationFilter">
|
|
<property name="authenticationEntryPoint">
|
|
<bean class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.JSLoginUrlAuthenticationEntryPoint">
|
|
<property name="loginFormUrl">
|
|
<value>/j_spring_security_check</value>
|
|
</property>
|
|
<property name="forceHttps">
|
|
<value>false</value>
|
|
</property>
|
|
</bean>
|
|
</property>
|
|
<property name="accessDeniedHandler">
|
|
<bean class="com.jaspersoft.jasperserver.war.JRSAccessDeniedHandlerImpl">
|
|
<property name="errorPage" value="/WEB-INF/jsp/modules/system/AccessDeniedPage.jsp"/>
|
|
<property name="themeResolver" ref="themeResolver" />
|
|
<property name="themeSource" ref="themeSource" />
|
|
<property name="localeResolver" ref="filterLocaleResolver"/>
|
|
</bean>
|
|
</property>
|
|
</bean>
|
|
|
|
<bean id="customAuthenticationManager" class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.JSProviderManager">
|
|
<property name="providers">
|
|
<list>
|
|
<ref bean="customAuthenticationProvider"/>
|
|
<ref bean="${bean.daoAuthenticationProvider}"/>
|
|
</list>
|
|
</property>
|
|
</bean>
|
|
|
|
<bean id="customAuthenticationProvider" class="com.jaspersoft.jasperserver.api.security.externalAuth.custom.CustomAuthenticationProvider"/>
|
|
|
|
<bean id="externalDataSynchronizer"
|
|
class="com.jaspersoft.jasperserver.api.security.externalAuth.ExternalDataSynchronizerImpl">
|
|
<property name="externalUserProcessors">
|
|
<list>
|
|
<ref local="externalUserSetupProcessor"/>
|
|
<!-- Example processor for creating user folder-->
|
|
<!--<ref local="externalUserFolderProcessor"/>-->
|
|
</list>
|
|
</property>
|
|
</bean>
|
|
|
|
<bean id="abstractExternalProcessor"
|
|
class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.AbstractExternalUserProcessor"
|
|
abstract="true">
|
|
<property name="repositoryService" ref="${bean.repositoryService}"/>
|
|
<property name="userAuthorityService" ref="${bean.userAuthorityService}"/>
|
|
<property name="tenantService" ref="${bean.tenantService}"/>
|
|
<property name="profileAttributeService" ref="profileAttributeService"/>
|
|
<property name="objectPermissionService" ref="objectPermissionService"/>
|
|
</bean>
|
|
|
|
<bean id="externalUserSetupProcessor"
|
|
class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserSetupProcessor"
|
|
parent="abstractExternalProcessor">
|
|
<!--Default permitted role characters; others are removed. Change regular expression to allow other chars.
|
|
<property name="permittedExternalRoleNameRegex" value="[A-Za-z0-9_]+"/>-->
|
|
|
|
<property name="userAuthorityService">
|
|
<ref bean="${bean.internalUserAuthorityService}"/>
|
|
</property>
|
|
<property name="defaultInternalRoles">
|
|
<list>
|
|
<value>ROLE_USER</value>
|
|
</list>
|
|
</property>
|
|
|
|
|
|
|
|
<property name="organizationRoleMap">
|
|
<map>
|
|
<!-- Example of mapping customer roles to JRS roles -->
|
|
<entry>
|
|
<key>
|
|
<value>ROLE_ADMIN_EXTERNAL_ORGANIZATION</value>
|
|
</key>
|
|
<!-- JRS role that the <key> external role is mapped to-->
|
|
<value>ROLE_ADMINISTRATOR</value>
|
|
</entry>
|
|
</map>
|
|
</property>
|
|
</bean>
|
|
|
|
<bean id="externalUserFolderProcessor"
|
|
class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserFolderProcessor"
|
|
parent="abstractExternalProcessor">
|
|
<property name="repositoryService" ref="${bean.unsecureRepositoryService}"/>
|
|
</bean>
|
|
|
|
<!-- ############ Synchronizer ############ -->
|
|
|
|
</beans>
|