Configuration Reference

Security Config Properties

Table 1. Configuration Properties for TokenConfigurationProperties
Property	Type	Description
`micronaut.security.token.enabled`	boolean	Sets whether the configuration is enabled. Default value true.
`micronaut.security.token.roles-name`	java.lang.String	Name of the roles property. Default value "roles".

🔗

Table 2. Configuration Properties for HttpHeaderTokenWriterConfigurationProperties
Property	Type	Description
`micronaut.security.token.writer.header.prefix`	java.lang.String	Value prefix for Http Header. Default value ({@value io.micronaut.http.HttpHeaderValues#AUTHORIZATION_PREFIX_BEARER}).
`micronaut.security.token.writer.header.header-name`	java.lang.String	Http Header to be used to propagate the token. Default value {@value io.micronaut.http.HttpHeaders#AUTHORIZATION}
`micronaut.security.token.writer.header.enabled`	boolean	Enable HttpHeaderTokenWriter. Default value (true).

🔗

Table 3. Configuration Properties for LogoutControllerConfigurationProperties
Property	Type	Description
`micronaut.security.endpoints.logout.enabled`	boolean	Enables LogoutController. Default value false.
`micronaut.security.endpoints.logout.path`	java.lang.String	Path to the LogoutController. Default value "/logout".
`micronaut.security.endpoints.logout.get-allowed`	boolean	Enables HTTP GET invocations of LogoutController. Default value (false).

🔗

Table 4. Configuration Properties for LoginControllerConfigurationProperties
Property	Type	Description
`micronaut.security.endpoints.login.enabled`	boolean	Enables LoginController. Default value false
`micronaut.security.endpoints.login.path`	java.lang.String	Path to the LoginController. Default value "/login"

🔗

Table 5. Configuration Properties for RedirectRejectionHandlerConfigurationProperties
Property	Type	Description
`micronaut.security.redirect.enabled`	boolean	Enables RedirectRejectionHandler. Default value true.
`micronaut.security.redirect.http-status`	HttpStatus	The Http status used used for redirection. Defaults value (303).

🔗

Table 6. Configuration Properties for SecurityConfigurationProperties
Property	Type	Description
`micronaut.security.enabled`	boolean	If Security is enabled. Default value false
`micronaut.security.intercept-url-map`	java.util.List	Map that defines the interception patterns.
`micronaut.security.ip-patterns`	java.util.List	Allowed IP patterns. Default value (["0.0.0.0"])

🔗

Table 7. Configuration Properties for TokenPropagationConfigurationProperties
Property	Type	Description
`micronaut.security.token.propagation.enabled`	boolean	Enables TokenPropagationHttpClientFilter. Default value false
`micronaut.security.token.propagation.service-id-regex`	java.lang.String	a regular expression to match the service id.
`micronaut.security.token.propagation.uri-regex`	java.lang.String	a regular expression to match the uri.
`micronaut.security.token.propagation.path`	java.lang.String	Configures TokenPropagationHttpClientFilter path. Default value "/**"

🔗

Table 8. Configuration Properties for BasicAuthTokenReaderConfigurationProperties
Property	Type	Description
`micronaut.security.token.basic-auth.enabled`	boolean	Enables BasicAuthTokenReader. Default value true.
`micronaut.security.token.basic-auth.header-name`	java.lang.String	Http Header name. Default value {@value io.micronaut.http.HttpHeaders#AUTHORIZATION}.
`micronaut.security.token.basic-auth.prefix`	java.lang.String	Http Header value prefix. Default value {@value io.micronaut.http.HttpHeaderValues#AUTHORIZATION_PREFIX_BASIC}.

Security Jwt Config Properties

🔗

Table 9. Configuration Properties for JwtConfigurationProperties
Property	Type	Description
`micronaut.security.token.jwt.enabled`	boolean	Sets whether JWT security is enabled. Default value (false).

🔗

Table 10. Configuration Properties for SecretSignatureConfiguration
Property	Type	Description
`micronaut.security.token.jwt.signatures.secret.*.jws-algorithm`	com.nimbusds.jose.JWSAlgorithm	{@link com.nimbusds.jose.JWSAlgorithm}. Defaults to HS256
`micronaut.security.token.jwt.signatures.secret.*.secret`	java.lang.String	Secret used to sign JWT. Length must be at least 256 bits.
`micronaut.security.token.jwt.signatures.secret.*.base64`	boolean	Indicates whether the supplied secret is base64 encoded.

🔗

Table 11. Configuration Properties for BearerTokenConfigurationProperties
Property	Type	Description
`micronaut.security.token.jwt.bearer.enabled`	boolean	Set whether to enable bearer token authentication. Default value true.
`micronaut.security.token.jwt.bearer.header-name`	java.lang.String	Sets the header name to use. Default value {@value io.micronaut.http.HttpHeaders#AUTHORIZATION}.
`micronaut.security.token.jwt.bearer.prefix`	java.lang.String	Sets the prefix to use for the auth token. Default value {@value io.micronaut.http.HttpHeaderValues#AUTHORIZATION_PREFIX_BEARER}.

🔗

Table 12. Configuration Properties for JwksSignatureConfigurationProperties
Property	Type	Description
`micronaut.security.token.jwt.signatures.jwks.*.url`	java.lang.String	Remote JSON Web Key set url. e.g. https://…/.well-known/jwks.json
`micronaut.security.token.jwt.signatures.jwks.*.key-type`	com.nimbusds.jose.jwk.KeyType	Representation of the kty parameter in a JSON Web Key (JWK). Default value (RSA).

🔗

Table 13. Configuration Properties for JwtGeneratorConfigurationProperties
Property	Type	Description
`micronaut.security.token.jwt.generator.refresh-token-expiration`	java.lang.Integer	Refresh token expiration. By default refresh tokens, do not expire.
`micronaut.security.token.jwt.generator.access-token-expiration`	java.lang.Integer	Access token expiration. Default value (3600).

🔗

Table 14. Configuration Properties for KeysControllerConfigurationProperties
Property	Type	Description
`micronaut.security.endpoints.keys.enabled`	boolean	Enables KeysController. Default value false.
`micronaut.security.endpoints.keys.path`	java.lang.String	Path to the KeysController. Default value "/keys".

Table 15. Configuration Properties for JwtCookieConfigurationProperties
Property	Type	Description
`micronaut.security.token.jwt.cookie.cookie-domain`	java.lang.String	Sets the domain name of this Cookie.
`micronaut.security.token.jwt.cookie.cookie-path`	java.lang.String	Sets the path of the cookie. Default value ("/".
`micronaut.security.token.jwt.cookie.cookie-http-only`	java.lang.Boolean	Whether the Cookie can only be accessed via HTTP. Default value (true.
`micronaut.security.token.jwt.cookie.cookie-secure`	java.lang.Boolean	Sets whether the cookie is secured. Default value (true.
`micronaut.security.token.jwt.cookie.cookie-max-age`	java.time.Duration	Sets the maximum age of the cookie.
`micronaut.security.token.jwt.cookie.enabled`	boolean	Sets whether JWT cookie based security is enabled. Default value (false).
`micronaut.security.token.jwt.cookie.logout-target-url`	java.lang.String	Sets the logout target URL. Default value ("/").
`micronaut.security.token.jwt.cookie.cookie-name`	java.lang.String	Cookie Name. Default value ("JWT").
`micronaut.security.token.jwt.cookie.login-success-target-url`	java.lang.String	Sets the login success target URL. Default value ("/").
`micronaut.security.token.jwt.cookie.login-failure-target-url`	java.lang.String	Sets the login failure target URL. Default value ("/").

🔗

Table 16. Configuration Properties for SecretEncryptionConfiguration
Property	Type	Description
`micronaut.security.token.jwt.encryptions.secret.*.jwe-algorithm`	com.nimbusds.jose.JWEAlgorithm	{@link com.nimbusds.jose.JWEAlgorithm}.
`micronaut.security.token.jwt.encryptions.secret.*.encryption-method`	com.nimbusds.jose.EncryptionMethod	{@link com.nimbusds.jose.EncryptionMethod}.
`micronaut.security.token.jwt.encryptions.secret.*.secret`	java.lang.String	Secret used for encryption configuration.

🔗

Table 17. Configuration Properties for OauthControllerConfigurationProperties
Property	Type	Description
`micronaut.security.endpoints.oauth.enabled`	boolean	Sets whether the OauthController is enabled. Default value (false).
`micronaut.security.endpoints.oauth.path`	java.lang.String	Sets the path to map the OauthController to. Default value ("/oauth/access_token").

Security Ldap Config Properties

🔗

Table 18. Configuration Properties for LdapConfiguration$ContextConfiguration
Property	Type	Description
`micronaut.security.ldap.*.context.server`	java.lang.String	Sets the server URL.
`micronaut.security.ldap.*.context.manager-dn`	java.lang.String	Sets the manager DN.
`micronaut.security.ldap.*.context.manager-password`	java.lang.String	Sets the manager password.
`micronaut.security.ldap.*.context.factory`	java.lang.String	Sets the context factory class. Default "com.sun.jndi.ldap.LdapCtxFactory"

🔗

Table 19. Configuration Properties for LdapConfiguration$GroupConfiguration
Property	Type	Description
`micronaut.security.ldap.*.groups.enabled`	boolean	Sets if group search is enabled. Default false
`micronaut.security.ldap.*.groups.subtree`	boolean	Sets if the subtree should be searched. Default true
`micronaut.security.ldap.*.groups.base`	java.lang.String	Sets the base DN to search from.
`micronaut.security.ldap.*.groups.filter`	java.lang.String	Sets the group search filter. Default "uniquemember={0}"
`micronaut.security.ldap.*.groups.attribute`	java.lang.String	Sets the group attribute name. Default "cn"

🔗

Table 20. Configuration Properties for LdapConfiguration
Property	Type	Description
`micronaut.security.ldap.*.enabled`	boolean	Sets whether this configuration is enabled. Default true.

🔗

Table 21. Configuration Properties for LdapConfiguration$SearchConfiguration
Property	Type	Description
`micronaut.security.ldap.*.search.subtree`	boolean	Sets if the subtree should be searched. Default true
`micronaut.security.ldap.*.search.base`	java.lang.String	Sets the base DN to search.
`micronaut.security.ldap.*.search.filter`	java.lang.String	Sets the search filter. Default "(uid={0})"
`micronaut.security.ldap.*.search.attributes`	java.lang.String[]	Sets the attributes to return. Default all

Security Session Config Properties

🔗

Table 22. Configuration Properties for SecuritySessionConfigurationProperties
Property	Type	Description
`micronaut.security.session.login-success-target-url`	java.lang.String	Sets the login success target URL. Default value ("/").
`micronaut.security.session.login-failure-target-url`	java.lang.String	Sets the login failure target URL. Default value ("/").
`micronaut.security.session.logout-target-url`	java.lang.String	Sets the logout target URL. Default value ("/").
`micronaut.security.session.unauthorized-target-url`	java.lang.String	Sets the unauthorized target URL.
`micronaut.security.session.forbidden-target-url`	java.lang.String	Sets the forbidden target URL.
`micronaut.security.session.enabled`	boolean	Sets whether the session config is enabled. Default value (false).
`micronaut.security.session.legacy-rejection-handler`	boolean	Decides whether the deprecated {@link SessionSecurityFilterOrderProvider} is loaded, instead of the new RedirectRejectionHandler. Defaults to (true).