PrincipalExtractor that extracts the username.AuthoritiesExtractor.AuthoritiesExtractor that looks up
CoreSecurityRoles from an external HTTP resource.Authentication implementation.RemoteTokenServices.AuthorizationProperties.setMapOauthScopes(boolean), you can optionally specify a custom
mapping of OAuth scopes to role names as they exist in the Data Flow application.WebSecurityConfigurer simply ignoring all paths conditionally if security is not enabled.OAuth2AccessToken.AuthenticationProvider that allows for authentication
(username and password) against an OAuth Server using a password grant.ClientHttpRequestInterceptor will retrieve, if available, the OAuth2 Access Token
and add it to the Authorization HTTP header.Condition that is only valid if security.basic.enabled is true
and the property security.oauth2 exists.Condition that is only valid if the property
security.oauth2.client.client-id exists.RemoteTokenServices.RemoteTokenServices.DefaultTokenServices that provides the functionality of the RemoteTokenServices
to validate a passed Access Token from a remote OAuth Server (introspection).Copyright © 2019 Pivotal Software, Inc.. All rights reserved.