mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-03-01 19:09:08 +00:00
Update JwtAuthenticationConverter Docs
Replaced usage of deprecated API Fixes gh-7062
This commit is contained in:
parent
9639962e27
commit
08f68c9122
@ -706,17 +706,24 @@ public class DirectlyConfiguredJwkSetUri extends WebSecurityConfigurerAdapter {
|
|||||||
}
|
}
|
||||||
|
|
||||||
Converter<Jwt, AbstractAuthenticationToken> grantedAuthoritiesExtractor() {
|
Converter<Jwt, AbstractAuthenticationToken> grantedAuthoritiesExtractor() {
|
||||||
return new GrantedAuthoritiesExtractor();
|
JwtAuthenticationConverter jwtAuthenticationConverter =
|
||||||
|
new JwtAuthenticationConverter();
|
||||||
|
jwtAuthenticationConverter.setJwtGrantedAuthoritiesConverter
|
||||||
|
(new GrantedAuthoritiesExtractor());
|
||||||
|
return jwtAuthenticationConveter;
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
which is responsible for converting a `Jwt` into an `Authentication`.
|
which is responsible for converting a `Jwt` into an `Authentication`.
|
||||||
|
As part of its configuration, we can supply a subsidiary converter to go from `Jwt` to a `Collection` of `GrantedAuthority`s.
|
||||||
|
|
||||||
We can override this quite simply to alter the way granted authorities are derived:
|
That final converter might be something like `GrantedAuthoritiesExtractor` below:
|
||||||
|
|
||||||
```java
|
```java
|
||||||
static class GrantedAuthoritiesExtractor extends JwtAuthenticationConverter {
|
static class GrantedAuthoritiesExtractor
|
||||||
protected Collection<GrantedAuthority> extractAuthorities(Jwt jwt) {
|
implements Converter<Jwt, Collection<GrantedAuthority>> {
|
||||||
|
|
||||||
|
public Collection<GrantedAuthority> convert(Jwt jwt) {
|
||||||
Collection<String> authorities = (Collection<String>)
|
Collection<String> authorities = (Collection<String>)
|
||||||
jwt.getClaims().get("mycustomclaim");
|
jwt.getClaims().get("mycustomclaim");
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user