Using Spring Security extras with Spring Boot in JavaFX application

Question

I am writing a small application using the stack Spring Boot + Spring Security + JavaFX. For Integration JavaFX with Spring Boot & Spring Security I used this source from Github: https://github.com/emorgado/javafx-springboot-springsecurity

How can I use Spring Security extras (like extras for Thymeleaf) in FXML files? For example: Thymeleaf -

<li class="nav-item" sec:authorize="hasRole('ROLE_ADMIN')">
  <a class="nav-link" th:href="@{/settings}">
     <p>Settings</p>
  </a>
</li>

FXML -

<Menu mnemonicParsing="false" text="Settings">
    <MenuItem mnemonicParsing="false" onAction="#mainSettingsAction" text="Main settings" />
</Menu>

Is there any way to use attributes like sec:authorize or tags <security> in FXML file?

Charles Lee · Accepted Answer · 2019-11-22 10:45:36Z

1

I think you should make your own fxml compiler like e(fx)clipse FXML compiler.

but, You can use this trick.

in .fxml

<MenuItem fx:id="menuSettings" mnemonicParsing="false" onAction="#mainSettingsAction" text="Main settings" userData="ROLE_ADMIN"/>

in the controller.

@FXML private MenuItem menuSettings;

if(menuSettings != null && menuSettings.getUserData() != null) {
    if("ROLE_ADMIN".equals(menuSettings.getUserData().toString())) {
        menuSettings.getParentMenu().getItems().remove(menuSettings);
    }
}

edited Nov 22, 2019 at 10:45

answered Nov 22, 2019 at 10:34

Charles Lee

3711 silver badge5 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Orkhan Hasanli Over a year ago

Thanks for the answer! I tried what you propose to do, but it doesn’t work correctly. I used logger to get current User Role - log.info(settingsMenu.getUserData()); It returns ROLE_ADMIN when I authorize with admin privileges or just user privileges. So your code delete menuSettings for both users (for admin & for user)

Orkhan Hasanli Over a year ago

May be I need to get current user Role from autowired AuthenticationManager. And then check if current user roleList contains ROLE_ADMIN ?

Orkhan Hasanli · Accepted Answer · 2019-11-23 00:28:39Z

0

Many thanks to Charles Lee for help! I provide my solution to this problem:

@FXML private MenuItem settingsMenu;
    @FXML
    public void initialize(URL location, ResourceBundle resources) {

    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    Doctor currentUser = (Doctor) doctorService.findDoctorByDoctorUsername(authentication.getName());

    if(!currentUser.getRoles().contains(Role.ADMIN)) {
    settingsMenu.getParentMenu().getItems().remove(settingsMenu);
    }

    }

answered Nov 23, 2019 at 0:28

Orkhan Hasanli

78814 silver badges25 bronze badges

1 Comment

Charles Lee Over a year ago

Sure. I just gave a hint. Of course, "ROLE_ADMIN" should not be hardcoded.

Collectives™ on Stack Overflow

Using Spring Security extras with Spring Boot in JavaFX application

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related