| Interface | Description |
|---|---|
| RequestAuthorizer |
The interface for request authorizers.
|
| SecurityFilterRule |
This interface is used by the
SecurityFilter to authorize incoming requests. |
| Class | Description |
|---|---|
| ApplicationRequestAuthorizer |
This matcher can be used for restricting access to an app.
|
| Authorization | |
| CsrfPreventionCookieConfigurator | |
| CsrfPreventionFilter |
Provides basic CSRF protection implementing a Same Origin Standard Header verification (step 1)
and a Synchronization Token with a cookie-stored token on the front-end.
|
| EngineRequestAuthorizer |
This is a
RequestAuthorizer which authorizes all process engine api
requests based on the current authentication |
| PathFilterRule |
A
SecurityFilterRule that deleagates to a set of PathMatchers |
| RequestAuthorizer.AnnonymousAuthorizer | |
| RequestFilter |
A request matcher that matches uris compatible to the JAX-RS syntax
and extracts the arguments on match.
|
| RequestMatcher | |
| RequestMatcher.Match | |
| SecurityFilter |
Simple filter implementation which delegates to a list of
FilterRules,
evaluating their SecurityFilterRule#setAuthorized(org.camunda.bpm.webapp.impl.security.filter.AppRequest) condition
for the given request. |
| SecurityFilterConfig |
POJO representing the configuration of the security filter
|
| SecurityFilterConfig.PathFilterConfig | |
| SecurityFilterConfig.PathMatcherConfig |
| Enum | Description |
|---|---|
| CsrfPreventionCookieConfigurator.SameSiteOption |
Copyright © 2014–2020 camunda services GmbH. All rights reserved.