Open mshabarov opened 7 months ago
A couple of additional notes:
NavigationAccessControl
NavigationAccessControl
might be enabled by default only if Quarkus security dependency is present (e.g. in a build step)NavigationAccessControl
by defining (similar to NavigationAccessControlConfigurer
in spring add-on)Probably not in the scope of this ticket, but additional improvement borrowed from Vaadin and Spring Security integration could be:
HttpSecurityPolicy
to define basic URL permissions (like we do in VaadinWebSecurity
)AuthenticationContext
and pluggable logout handler support.Here's the link to a repository with an example of integration of Quarkus Security with Vaadin. It is a bit outdated, but may help to give an idea for a potential implementation: https://github.com/mcollovati/flow-quarkus-security-example/tree/main
View-based access control Vaadin feature is enabled automatically in Spring-based Vaadin applications if an extension of
VaadinWebSecurity
class is configured.Same approach can be done for Quarkus applications, so that developers don't need to instantiate
ViewAccessChecker
explicitly and create their ownVaadinServiceInitListener
.See this comment and this solution for more context.