mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-03-01 10:59:16 +00:00
Update JwtAuthenticationConverter Docs
Replaced usage of deprecated API Fixes gh-7062
This commit is contained in:
parent
9639962e27
commit
08f68c9122
@ -706,17 +706,24 @@ public class DirectlyConfiguredJwkSetUri extends WebSecurityConfigurerAdapter {
|
||||
}
|
||||
|
||||
Converter<Jwt, AbstractAuthenticationToken> grantedAuthoritiesExtractor() {
|
||||
return new GrantedAuthoritiesExtractor();
|
||||
JwtAuthenticationConverter jwtAuthenticationConverter =
|
||||
new JwtAuthenticationConverter();
|
||||
jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter
|
||||
(new GrantedAuthoritiesExtractor());
|
||||
return jwtAuthenticationConveter;
|
||||
}
|
||||
```
|
||||
|
||||
which is responsible for converting a `Jwt` into an `Authentication`.
|
||||
As part of its configuration, we can supply a subsidiary converter to go from `Jwt` to a `Collection` of `GrantedAuthority`s.
|
||||
|
||||
We can override this quite simply to alter the way granted authorities are derived:
|
||||
That final converter might be something like `GrantedAuthoritiesExtractor` below:
|
||||
|
||||
```java
|
||||
static class GrantedAuthoritiesExtractor extends JwtAuthenticationConverter {
|
||||
protected Collection<GrantedAuthority> extractAuthorities(Jwt jwt) {
|
||||
static class GrantedAuthoritiesExtractor
|
||||
implements Converter<Jwt, Collection<GrantedAuthority>> {
|
||||
|
||||
public Collection<GrantedAuthority> convert(Jwt jwt) {
|
||||
Collection<String> authorities = (Collection<String>)
|
||||
jwt.getClaims().get("mycustomclaim");
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user