mirror of
https://gitee.com/dromara/MaxKey.git
synced 2025-12-07 01:18:27 +08:00
Delete spring-security-oauth2-1.0.xsd
This commit is contained in:
shimingxy
GitHub
parent
d088c15853
commit
46cf2fe20d
@ -1,728 +0,0 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<xs:schema xmlns="http://www.springframework.org/schema/security/oauth2" xmlns:xs="http://www.w3.org/2001/XMLSchema"
|
|
||||||
xmlns:beans="http://www.springframework.org/schema/beans" targetNamespace="http://www.springframework.org/schema/security/oauth2"
|
|
||||||
elementFormDefault="qualified" attributeFormDefault="unqualified">
|
|
||||||
|
|
||||||
<xs:import namespace="http://www.springframework.org/schema/beans" schemaLocation="http://www.springframework.org/schema/beans/spring-beans-3.1.xsd" />
|
|
||||||
|
|
||||||
<xs:element name="rest-template">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Creates an OAuth2RestTemplate with all the pieces needed to connect to a remote resource from
|
|
||||||
a web
|
|
||||||
application. Injects request and session-scoped beans into the template, so can only be
|
|
||||||
used in the context of a web
|
|
||||||
request.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType">
|
|
||||||
<xs:sequence>
|
|
||||||
<xs:element ref="beans:description" minOccurs="0" />
|
|
||||||
<xs:choice minOccurs="0" maxOccurs="unbounded">
|
|
||||||
<xs:element ref="beans:property" />
|
|
||||||
</xs:choice>
|
|
||||||
</xs:sequence>
|
|
||||||
<xs:attribute name="resource">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The OAuth2ProtectedResourceDetails governing the configuration of this client. Mandatory.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="access-token-provider" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that manages access token acquisition. Optional (defaults to a chain
|
|
||||||
including common grant types from the spec).
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:extension>
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="authorization-server">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Specifies that the oauth 2 authorization and token
|
|
||||||
endpoints should be created in the application
|
|
||||||
context. These are
|
|
||||||
implemented as regular Spring @Controller beans, so as long as the
|
|
||||||
default Spring MVC set up in
|
|
||||||
present in the application
|
|
||||||
the endpoints should work (at /oauth/authorization and /oauth/token by
|
|
||||||
default).
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
|
|
||||||
<xs:sequence>
|
|
||||||
<xs:element name="authorization-code" minOccurs="0" maxOccurs="1">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of the authorization code
|
|
||||||
mechanism. This
|
|
||||||
mechanism enables a way for clients to
|
|
||||||
obtain an
|
|
||||||
access token by obtaining an authorization code.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable the authorization code
|
|
||||||
mechanism.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authorization-code-services-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the
|
|
||||||
authorization code
|
|
||||||
services. Default value is an
|
|
||||||
instance of
|
|
||||||
"org.springframework.security.oauth2.provider.authorization_code.InMemoryAuthorizationCodeServices".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
<xs:element name="implicit" minOccurs="0" maxOccurs="1">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of the client credentials
|
|
||||||
grant type.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable the implicit grant type
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
<xs:element name="refresh-token" minOccurs="0" maxOccurs="1">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of the refresh token grant
|
|
||||||
type.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable the refresh token grant
|
|
||||||
type
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
<xs:element name="client-credentials" minOccurs="0" maxOccurs="1">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of the client credentials
|
|
||||||
grant type.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable the refresh token grant
|
|
||||||
type
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
<xs:element name="password" minOccurs="0" maxOccurs="1">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of the resource owner password
|
|
||||||
grant type.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable the refresh token grant
|
|
||||||
type
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authentication-manager-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
A reference to an authentication manager that
|
|
||||||
can be used to
|
|
||||||
authenticate the resource owner
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
<xs:element name="custom-grant" minOccurs="0" maxOccurs="unbounded">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The configuration of your custom grant type.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="disabled" type="xs:boolean">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Whether to disable this grant
|
|
||||||
type
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="token-granter-ref" type="xs:string" use="required">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
A reference to your token granter
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
</xs:sequence>
|
|
||||||
<xs:attribute name="client-details-service-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the client
|
|
||||||
details service.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="token-endpoint-url" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The URL at which a request for an access token
|
|
||||||
will be serviced.
|
|
||||||
Default value: "/oauth/token"
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authorization-endpoint-url" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The URL at which a user is redirected for
|
|
||||||
authorization. Default
|
|
||||||
value: "/oauth/authorize"
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<!--the following attributes are less used -->
|
|
||||||
<xs:attribute name="token-granter-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the
|
|
||||||
granter of different oauth
|
|
||||||
token types.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="implicit-grant-service-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the
|
|
||||||
implicit grant service.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="token-services-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the token
|
|
||||||
services. Default
|
|
||||||
value is an instance of
|
|
||||||
"org.springframework.security.oauth2.provider.token.DefaultTokenServices".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="authorization-request-manager-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the manager for
|
|
||||||
authorization requests from the input
|
|
||||||
parameters (e.g. request parameters).
|
|
||||||
Default
|
|
||||||
value is an
|
|
||||||
instance of
|
|
||||||
"org.springframework.security.oauth2.provider.token.DefaultAuthorizationRequestManager".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="user-approval-handler-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Reference to a bean that handles user approval decisions. Using this strategy servers can
|
|
||||||
selectively skip the approval process depending on decisions in the past or on the type of client.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="user-approval-page" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The URL of the page that handles the user
|
|
||||||
approval form (if needed, depending on the grant type).
|
|
||||||
The default is "forward:/oauth/confirm_access" which is not handled
|
|
||||||
by the authorization endpoint, so normally you
|
|
||||||
will have to supply a handler
|
|
||||||
for this path.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="error-page" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The URL of the page that handles errors (default forward:/oauth/error).
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="approval-parameter-name" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The name of the form parameter that is used to
|
|
||||||
indicate user
|
|
||||||
approval of the client
|
|
||||||
authentication
|
|
||||||
request.
|
|
||||||
Default value: "user_oauth_approval".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="redirect-resolver-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the
|
|
||||||
redirect resolver, used
|
|
||||||
during the user
|
|
||||||
authorization.
|
|
||||||
Default
|
|
||||||
value is an instance of
|
|
||||||
"org.springframework.security.oauth2.provider.authorization_code.DefaultRedirectResolver".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="resource-server">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Specifies that there are oauth 2 protected resources in
|
|
||||||
the application context. This element
|
|
||||||
has an
|
|
||||||
id which is the bean id of the filter created. The filter
|
|
||||||
should be added to the Spring Security filter chain at
|
|
||||||
position before="PRE_AUTH_FILTER"
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType">
|
|
||||||
|
|
||||||
<xs:attribute name="resource-id" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The resource id that is protected by this filter
|
|
||||||
if any. If empty or
|
|
||||||
absent then all resource ids
|
|
||||||
are allowed,
|
|
||||||
otherwise
|
|
||||||
only tokens which are granted to a client that contains
|
|
||||||
this reosurce
|
|
||||||
id will be legal.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="token-services-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the token
|
|
||||||
services. Default
|
|
||||||
value is an instance of
|
|
||||||
"org.springframework.security.oauth2.provider.token.DefaultTokenServices".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="entry-point-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the entry point for failed authentications. Defaults to
|
|
||||||
a vanilla
|
|
||||||
org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
|
|
||||||
<xs:attribute name="auth-details-source-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the AuthenticationDetailsSource.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:extension>
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="client-details-service">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Default element that contains the definition of the
|
|
||||||
OAuth clients that are
|
|
||||||
allowed to access this
|
|
||||||
service.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType">
|
|
||||||
<xs:choice minOccurs="0" maxOccurs="unbounded">
|
|
||||||
<xs:element name="client">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Definition of a client that can act on behalf
|
|
||||||
of a user.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:attribute name="client-id" type="xs:string" use="required">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The client id.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="secret" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The client secret. If the secret is
|
|
||||||
undefined or empty (the
|
|
||||||
default) the client does
|
|
||||||
not
|
|
||||||
require a
|
|
||||||
secret.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="redirect-uri" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The re-direct URI(s) established during
|
|
||||||
registration (optional, comma separated).
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="resource-ids" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The resource ids to which this client can be
|
|
||||||
granted access
|
|
||||||
(comma-separated). If missing or
|
|
||||||
empty all
|
|
||||||
resources are
|
|
||||||
accessible (not recommended by the spec).
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="scope" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The scopes to which the client is limited
|
|
||||||
(comma-separated). If
|
|
||||||
scope is undefined or empty
|
|
||||||
(the
|
|
||||||
default) the client
|
|
||||||
is not limited by scope, but in that case
|
|
||||||
the authorization
|
|
||||||
service must explicitly
|
|
||||||
accept unlimited
|
|
||||||
access by not
|
|
||||||
specifying any scopes itself.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authorized-grant-types" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Grant types that are authorized for the
|
|
||||||
client to use
|
|
||||||
(comma-separated). Currently defined
|
|
||||||
grant types
|
|
||||||
include
|
|
||||||
"authorization_code", "password", "assertion", and
|
|
||||||
"refresh_token". Default value is
|
|
||||||
"authorization_code,refresh_token".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authorities" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Authorities that are granted to the client
|
|
||||||
(comma-separated). Distinct
|
|
||||||
from the authorities
|
|
||||||
granted to
|
|
||||||
the user on behalf
|
|
||||||
of whom the client is acting.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="access-token-validity" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The access token validity period in seconds (optional). If unspecified a global default will
|
|
||||||
be applied by the token services.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="refresh-token-validity" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The refresh token validity period in seconds (optional). If unspecified a global default
|
|
||||||
will
|
|
||||||
be applied by the token services.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
</xs:choice>
|
|
||||||
</xs:extension>
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="expression-handler">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Element for declaring and configuring an expression
|
|
||||||
handler for oauth
|
|
||||||
security expressions. See
|
|
||||||
http://static.springsource.org/spring-security/site/docs/3.0.x/reference/el-access.html
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType" />
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="web-expression-handler">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Element for declaring and configuring an expression
|
|
||||||
handler for oauth
|
|
||||||
security expressions in http
|
|
||||||
intercept urls. See
|
|
||||||
http://static.springsource.org/spring-security/site/docs/3.0.x/reference/el-access.html
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType" />
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="client">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Creates the oauth 2 client filter be be added to the
|
|
||||||
application security policy.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType">
|
|
||||||
<xs:attribute name="redirect-strategy-ref" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The reference to the bean that defines the
|
|
||||||
redirect strategy, used when redirecting the user for
|
|
||||||
access authorization. Default value is an instance of
|
|
||||||
"org.springframework.security.web.DefaultRedirectStrategy".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:extension>
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
<xs:element name="resource">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Definition of a remote resource that is protected via
|
|
||||||
OAuth2 to which this client application wants
|
|
||||||
access.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
<xs:complexType>
|
|
||||||
<xs:complexContent>
|
|
||||||
<xs:extension base="beans:identifiedType">
|
|
||||||
<xs:attribute name="type" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The grant type. Currently defined grant types
|
|
||||||
include
|
|
||||||
"authorization_code", "password", and
|
|
||||||
"assertion".
|
|
||||||
Default value
|
|
||||||
is "authorization_code".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="client-id" type="xs:string" use="required">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The client id. This is the id by which the
|
|
||||||
resource server will
|
|
||||||
identify this application.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="access-token-uri" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The uri to where the access token may be
|
|
||||||
obtained.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="scope" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Comma-separted list of string specifying the
|
|
||||||
scope of the access to the
|
|
||||||
resource. By default,
|
|
||||||
no
|
|
||||||
scope will be
|
|
||||||
specified.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="client-secret" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The secret asssociated with the resource. By
|
|
||||||
default, no secret
|
|
||||||
will be supplied for access to
|
|
||||||
the resource.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="client-authentication-scheme" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The scheme that is used to pass the client
|
|
||||||
secret. Suggested
|
|
||||||
values: "header" and "form".
|
|
||||||
Default:
|
|
||||||
"header".
|
|
||||||
See section 2.1 of the OAuth 2 spec.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="user-authorization-uri" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The uri to which the user will be redirected if
|
|
||||||
the user is ever
|
|
||||||
needed to grant an authorization
|
|
||||||
code.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="authentication-scheme" default="header" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The method for bearing the token when accessing
|
|
||||||
the resource.
|
|
||||||
Default value is "header". See
|
|
||||||
AuthenticationScheme enum for possible values.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="token-name" type="xs:string" default="access_token">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The name of the bearer token. The default is
|
|
||||||
"access_token", which
|
|
||||||
is according to the spec,
|
|
||||||
but
|
|
||||||
some providers
|
|
||||||
(e.g. Facebook) don't conform to the spec.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="pre-established-redirect-uri" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Some resource servers may require a
|
|
||||||
pre-established URI to which
|
|
||||||
they will redirect users after
|
|
||||||
users
|
|
||||||
authorize an access token.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="use-current-uri" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
Boolean flag indicating that the current URI should be used as a redirect (if available) rather
|
|
||||||
than the
|
|
||||||
registered redirect URI. Default is true.
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="username" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The username for authentication, required only when type is "password".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
<xs:attribute name="password" type="xs:string">
|
|
||||||
<xs:annotation>
|
|
||||||
<xs:documentation>
|
|
||||||
The password for authentication, required only when type is "password".
|
|
||||||
</xs:documentation>
|
|
||||||
</xs:annotation>
|
|
||||||
</xs:attribute>
|
|
||||||
</xs:extension>
|
|
||||||
</xs:complexContent>
|
|
||||||
</xs:complexType>
|
|
||||||
</xs:element>
|
|
||||||
|
|
||||||
</xs:schema>
|
|
||||||
Loading…
x
Reference in New Issue
Block a user