Docs

Spring Applications

Securing a Vaadin Flow application with Spring Security, using the built-in security helpers.

Vaadin’s built-in security helpers integrate with Spring Security. In a Spring Boot application, VaadinSecurityConfigurer applies the Spring Security configuration that a Vaadin application needs, and enables view access control. Setting Up Spring Security describes the minimal setup.

For Spring applications that don’t use Spring Security, see Without Spring Security. For task-oriented guides, see Building Apps > Security.

Topics

Setting Up Spring Security
The minimal setup for securing a Vaadin Flow application with Spring Security.
Security Configuration
Configuring Spring Security for a Vaadin application with VaadinSecurityConfigurer.
Current User Information
Accessing the authenticated user, checking roles, and logging out with AuthenticationContext.
Roles & Authorities
How role names in access annotations map to Spring Security authorities.
OAuth2 Authentication
Vaadin and Spring Security configuration for OAuth2 Authentication.
Security Context in Asynchronous Code
Propagating the Spring Security context to background tasks in a Vaadin application.
Impersonation
Letting an administrator act as another user with Spring Security's SwitchUserFilter.
Without Spring Security
Using view access control in a Spring Boot application that doesn't use Spring Security.

4C8D835D-4E6E-4D81-BEA1-A865FEB17BAD

Updated –