or run

npx @tessl/cli init
Log in

Version

Tile

Overview

Evals

Files

docs

dns-resolution.mdhttp-invoker-auth.mdindex.mdrmi-context-propagation.md
tile.json

tessl/maven-org-springframework-security--spring-security-remoting

Spring Security Remoting provides security services for remote method invocation in distributed Spring applications including RMI context propagation, HTTP invoker authentication, and DNS resolution utilities.

Workspace
tessl
Visibility
Public
Created
Last updated
Describes
mavenpkg:maven/org.springframework.security/spring-security-remoting@5.8.x

To install, run

npx @tessl/cli install tessl/maven-org-springframework-security--spring-security-remoting@5.8.0

index.mddocs/

Spring Security Remoting

Spring Security Remoting provides security services for remote method invocation in distributed Spring applications. It includes support for RMI context propagation, HTTP invoker authentication, and DNS resolution utilities that maintain security context across remote calls.

Deprecation Notice: All APIs in this module are deprecated as of Spring Security 5.6.0 with no replacement and will be removed in future versions.

Package Information

  • Package Name: org.springframework.security:spring-security-remoting
  • Package Type: Maven
  • Language: Java
  • Installation: 
    <dependency>
  <groupId>org.springframework.security</groupId>
  <artifactId>spring-security-remoting</artifactId>
  <version>5.8.16</version>
</dependency>

Core Imports

// DNS resolution
import org.springframework.security.remoting.dns.DnsResolver;
import org.springframework.security.remoting.dns.JndiDnsResolver;
import org.springframework.security.remoting.dns.InitialContextFactory;
import org.springframework.security.remoting.dns.DnsLookupException;
import org.springframework.security.remoting.dns.DnsEntryNotFoundException;

// HTTP invoker authentication
import org.springframework.security.remoting.httpinvoker.AuthenticationSimpleHttpInvokerRequestExecutor;
import org.springframework.security.authentication.AuthenticationTrustResolver;

// RMI context propagation
import org.springframework.security.remoting.rmi.ContextPropagatingRemoteInvocationFactory;
import org.springframework.security.remoting.rmi.ContextPropagatingRemoteInvocation;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;

Required framework imports for DNS resolution:

import javax.naming.directory.DirContext;
import javax.naming.directory.InitialDirContext;

Basic Usage

HTTP Invoker with Authentication

import org.springframework.remoting.httpinvoker.HttpInvokerProxyFactoryBean;
import org.springframework.security.remoting.httpinvoker.AuthenticationSimpleHttpInvokerRequestExecutor;

// Configure HTTP invoker with authentication
HttpInvokerProxyFactoryBean proxy = new HttpInvokerProxyFactoryBean();
proxy.setServiceUrl("http://localhost:8080/remoting/MyService");
proxy.setServiceInterface(MyService.class);

// Add authentication support
AuthenticationSimpleHttpInvokerRequestExecutor executor = 
    new AuthenticationSimpleHttpInvokerRequestExecutor();
proxy.setHttpInvokerRequestExecutor(executor);

MyService service = (MyService) proxy.getObject();

RMI with Security Context Propagation

import org.springframework.remoting.rmi.RmiProxyFactoryBean;  
import org.springframework.security.remoting.rmi.ContextPropagatingRemoteInvocationFactory;

// Configure RMI proxy with security context propagation
RmiProxyFactoryBean proxy = new RmiProxyFactoryBean();
proxy.setServiceUrl("rmi://localhost:1099/MyService");
proxy.setServiceInterface(MyService.class);
proxy.setRefreshStubOnConnectFailure(true);

// Add security context propagation
ContextPropagatingRemoteInvocationFactory factory = 
    new ContextPropagatingRemoteInvocationFactory();
proxy.setRemoteInvocationFactory(factory);

MyService service = (MyService) proxy.getObject();

Architecture

Spring Security Remoting extends Spring Framework's remoting capabilities to support security context propagation across distributed applications:

  • HTTP Invoker Integration: Extends SimpleHttpInvokerRequestExecutor to add BASIC authentication using SecurityContextHolder credentials
  • RMI Context Propagation: Custom RemoteInvocation implementation that carries security principal and credentials from client to server
  • DNS Resolution: JNDI-based DNS resolver for service discovery in distributed environments
  • Security Context Management: Automatic propagation and restoration of Spring Security context across remote boundaries

Capabilities

DNS Resolution

DNS resolution utilities for service discovery in distributed environments, supporting both A record and SRV record lookups with JNDI-based implementation.

public interface DnsResolver {
    String resolveIpAddress(String hostname) throws DnsEntryNotFoundException, DnsLookupException;
    String resolveServiceEntry(String serviceType, String domain) throws DnsEntryNotFoundException, DnsLookupException;
    String resolveServiceIpAddress(String serviceType, String domain) throws DnsEntryNotFoundException, DnsLookupException;
}

public class JndiDnsResolver implements DnsResolver {
    public void setCtxFactory(InitialContextFactory ctxFactory);
    public String resolveServiceIpAddressAndPort(String serviceType, String domain);
}

DNS Resolution

HTTP Invoker Authentication

BASIC authentication support for Spring's HTTP invoker remoting, automatically using credentials from SecurityContextHolder to authenticate remote method calls.

public class AuthenticationSimpleHttpInvokerRequestExecutor extends SimpleHttpInvokerRequestExecutor {
    protected void prepareConnection(HttpURLConnection con, int contentLength) throws IOException;
    protected void doPrepareConnection(HttpURLConnection con, int contentLength) throws IOException;
}

HTTP Invoker Authentication

RMI Context Propagation

Security context propagation for RMI remoting, enabling transparent transmission of authentication information from client to server in distributed RMI applications.

public class ContextPropagatingRemoteInvocation extends RemoteInvocation {
    public ContextPropagatingRemoteInvocation(MethodInvocation methodInvocation);
    public Object invoke(Object targetObject) throws NoSuchMethodException, IllegalAccessException, InvocationTargetException;
    protected Authentication createAuthenticationRequest(String principal, String credentials);
}

public class ContextPropagatingRemoteInvocationFactory implements RemoteInvocationFactory {
    public RemoteInvocation createRemoteInvocation(MethodInvocation methodInvocation);
}

RMI Context Propagation

Exception Types

public class DnsLookupException extends RuntimeException {
    public DnsLookupException(String msg);
    public DnsLookupException(String msg, Throwable cause);
}

public class DnsEntryNotFoundException extends DnsLookupException {
    public DnsEntryNotFoundException(String msg);
    public DnsEntryNotFoundException(String msg, Throwable cause);
}

Integration Dependencies

This module requires the following Spring Framework components:

  • spring-remoting for HTTP invoker and RMI support
  • spring-security-core for SecurityContextHolder and Authentication
  • Java Naming API (javax.naming) for DNS resolution
  • Apache Commons Logging for internal logging