Skip to content

Latest commit

 

History

History
14 lines (10 loc) · 1.2 KB

README.md

File metadata and controls

14 lines (10 loc) · 1.2 KB

AAP Client - Security

This component helps protect your API's endpoints via a token produced by the AAP.

Use the provided classes to secure your API.

In simple use cases you can rely on the Auto-configuration, which should automatically secure all your endpoints with AAP token when you add AAP Client security as a dependency to your Spring Boot project. In more complicated cases you may need to provide your own Security Config (such as WebSecurityConfigurer) placing StatelessAuthenticationFilter in the Filter Chain. If you still want to use Auto-configuration and send CORS requests to your application, you can set the property

aap-client.cors.enabled=true

This will add CorsFilter and use your Spring MVC CORS configuration (such as @CrossOrigin annotations), which you need to provide.