jwt-auth-converter-domain-level.java

@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.csrf().disable();

        http.oauth2ResourceServer()
                .jwt()
                .jwtAuthenticationConverter(jwtAuthenticationConverter());
    }

    public JwtAuthenticationConverter jwtAuthenticationConverter() {
        JwtAuthenticationConverter converter = new JwtAuthenticationConverter();

        converter.setJwtGrantedAuthoritiesConverter(jwt ->
                Optional.ofNullable(jwt.getClaimAsStringList("custom_claims"))
                        .stream()
                        .flatMap(Collection::stream)
                        .flatMap(claim -> {
                            var parts = claim.split(":", 3);

                            EntityType entityType;
                            Long entityId;
                            Permission permission;

                            try {
                                entityType = EntityType.valueOf(parts[0]);
                                entityId = Long.valueOf(parts[1]);
                                permission = Permission.valueOf(parts[2]);
                            } catch (IllegalArgumentException e) {
                                return Stream.empty();
                            }

                            return Stream.of(new DomainGrantedAuthority(entityType, entityId, permission));
                        })
                        .collect(Collectors.toList()));

        return converter;
    }
}