SEC-3009: @Configuration support for LdapUserDetailsService

Jeremie Hoelter (Migrated from SEC-3009) said:

Hello,

As advised by Dave Syer, following a question on the injection of the LdapUserDetailsService configured using the org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder, I am wondering if this could be possible to:

• Expose the LdapUserDetailsService configured calling org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder#ldapAuthentication as Bean?
• Add @Configuration style creation support for the UserDetailsService

Current workaround:

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:context="http://www.springframework.org/schema/context"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
                http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd">

    <context:annotation-config/>
    <context:property-placeholder location="application.yml"/>

    <bean id="contextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
        <constructor-arg value="${authentication.ldap.url}" />
    </bean>

    <bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
        <constructor-arg index="0" value="${authentication.ldap.userSearchBase}" />
        <constructor-arg index="1" value="uid={0}" />
        <constructor-arg index="2" ref="contextSource"/>
    </bean>

    <bean id="ldapAuthoritiesPopulator" class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
        <constructor-arg index="0" ref="contextSource"/>
        <constructor-arg index="1" value="${authentication.ldap.groupSearchBase}"/>
        <property name="groupSearchFilter" value="${authentication.ldap.groupSearchFilter}"/>
    </bean>

    <bean id="myUserDetailsService"
          class="org.springframework.security.ldap.userdetails.LdapUserDetailsService">
        <constructor-arg index="0" ref="userSearch"/>
        <constructor-arg index="1" ref="ldapAuthoritiesPopulator"/>
    </bean>

</beans>

Many thanks in advance,
Regards,
Jeremie

Start with AuthenticationManagerBuilder#ldapAuthentication and LdapUserDetailsService, then compare them with the requested @Configuration-style UserDetailsService creation. The issue's XML workaround shows the current setup and the desired scope: expose the configured service as a bean and support equivalent Java configuration. No tests or repository files are identified, so the relevant configuration and authentication tests must be located first.