Docs

Spring Applications

Securing a Vaadin Flow application with Spring Security, using the built-in security helpers.

Vaadin’s built-in security helpers integrate with Spring Security. Setting Up Spring Security describes the minimal setup.

For Spring applications that don’t use Spring Security, see Without Spring Security. For task-oriented guides, see Building Apps > Security.

Topics

Setting Up Spring Security
The minimal setup for securing a Vaadin Flow application with Spring Security.
Security Configuration
Configuring Spring Security for a Vaadin application with VaadinSecurityConfigurer.
Customizing Navigation Access Control
Configuring the access checkers and the decision resolver of navigation access control with Spring.
Authentication Context
Accessing the authenticated user, checking roles, and logging out with AuthenticationContext.
Roles & Authorities
How role names in access annotations map to Spring Security authorities.
Custom Error Views
The security configuration that custom error views need in a Spring Security application.
OAuth2 Authentication
Vaadin and Spring Security configuration for OAuth2 Authentication.
Security Context in Asynchronous Code
Propagating the Spring Security context to background tasks in a Vaadin application.
Impersonation
Letting an administrator act as another user with Spring Security's SwitchUserFilter.
Without Spring Security
Using view access control in a Spring Boot application that doesn't use Spring Security.

4C8D835D-4E6E-4D81-BEA1-A865FEB17BAD

Updated –