1
1
/*
2
- * Copyright 2002-2020 the original author or authors.
2
+ * Copyright 2002-2024 the original author or authors.
3
3
*
4
4
* Licensed under the Apache License, Version 2.0 (the "License");
5
5
* you may not use this file except in compliance with the License.
27
27
import org .springframework .security .web .DefaultSecurityFilterChain ;
28
28
import org .springframework .security .web .access .ExceptionTranslationFilter ;
29
29
import org .springframework .security .web .access .channel .ChannelProcessingFilter ;
30
+ import org .springframework .security .web .access .intercept .AuthorizationFilter ;
30
31
import org .springframework .security .web .access .intercept .FilterSecurityInterceptor ;
31
32
import org .springframework .security .web .authentication .AnonymousAuthenticationFilter ;
32
33
import org .springframework .security .web .authentication .UsernamePasswordAuthenticationFilter ;
37
38
import org .springframework .security .web .authentication .switchuser .SwitchUserFilter ;
38
39
import org .springframework .security .web .authentication .www .BasicAuthenticationFilter ;
39
40
import org .springframework .security .web .authentication .www .DigestAuthenticationFilter ;
41
+ import org .springframework .security .web .context .SecurityContextHolderFilter ;
40
42
import org .springframework .security .web .context .SecurityContextPersistenceFilter ;
43
+ import org .springframework .security .web .context .request .async .WebAsyncManagerIntegrationFilter ;
44
+ import org .springframework .security .web .csrf .CsrfFilter ;
45
+ import org .springframework .security .web .header .HeaderWriterFilter ;
41
46
import org .springframework .security .web .jaasapi .JaasApiIntegrationFilter ;
42
47
import org .springframework .security .web .savedrequest .RequestCacheAwareFilter ;
43
48
import org .springframework .security .web .servletapi .SecurityContextHolderAwareRequestFilter ;
44
49
import org .springframework .security .web .session .ConcurrentSessionFilter ;
45
50
import org .springframework .security .web .session .DisableEncodeUrlFilter ;
46
51
import org .springframework .security .web .session .ForceEagerSessionCreationFilter ;
47
52
import org .springframework .security .web .session .SessionManagementFilter ;
53
+ import org .springframework .web .filter .CorsFilter ;
48
54
49
55
/**
50
56
* @param <H>
@@ -126,15 +132,24 @@ public interface HttpSecurityBuilder<H extends HttpSecurityBuilder<H>>
126
132
* The ordering of the Filters is:
127
133
*
128
134
* <ul>
129
- * <li>{@link ForceEagerSessionCreationFilter}</li>
130
135
* <li>{@link DisableEncodeUrlFilter}</li>
136
+ * <li>{@link ForceEagerSessionCreationFilter}</li>
131
137
* <li>{@link ChannelProcessingFilter}</li>
138
+ * <li>{@link WebAsyncManagerIntegrationFilter}</li>
139
+ * <li>{@link SecurityContextHolderFilter}</li>
132
140
* <li>{@link SecurityContextPersistenceFilter}</li>
141
+ * <li>{@link HeaderWriterFilter}</li>
142
+ * <li>{@link CorsFilter}</li>
143
+ * <li>{@link CsrfFilter}</li>
133
144
* <li>{@link LogoutFilter}</li>
145
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter}</li>
146
+ * <li>{@link org.springframework.security.saml2.provider.service.web.Saml2WebSsoAuthenticationRequestFilter}</li>
134
147
* <li>{@link X509AuthenticationFilter}</li>
135
148
* <li>{@link AbstractPreAuthenticatedProcessingFilter}</li>
136
149
* <li><a href="
137
150
* {@docRoot}/org/springframework/security/cas/web/CasAuthenticationFilter.html">CasAuthenticationFilter</a></li>
151
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter}</li>
152
+ * <li>{@link org.springframework.security.saml2.provider.service.web.authentication.Saml2WebSsoAuthenticationFilter}</li>
138
153
* <li>{@link UsernamePasswordAuthenticationFilter}</li>
139
154
* <li>{@link org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter}</li>
140
155
* <li>{@link org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter}</li>
@@ -147,9 +162,11 @@ public interface HttpSecurityBuilder<H extends HttpSecurityBuilder<H>>
147
162
* <li>{@link JaasApiIntegrationFilter}</li>
148
163
* <li>{@link RememberMeAuthenticationFilter}</li>
149
164
* <li>{@link AnonymousAuthenticationFilter}</li>
165
+ * <li>{@link org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter}</li>
150
166
* <li>{@link SessionManagementFilter}</li>
151
167
* <li>{@link ExceptionTranslationFilter}</li>
152
168
* <li>{@link FilterSecurityInterceptor}</li>
169
+ * <li>{@link AuthorizationFilter}</li>
153
170
* <li>{@link SwitchUserFilter}</li>
154
171
* </ul>
155
172
* @param filter the {@link Filter} to add
0 commit comments