Spring Security 4x support Web Socket

HttpSessionInitializer.java

public class HttpSessionInitializer extends AbstractHttpSessionApplicationInitializer {

  protected String getDispatcherWebApplicationContextSuffix() {
    return AbstractDispatcherServletInitializer.DEFAULT_SERVLET_NAME;
  }
}

SecurityConfiguration.java

@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
@EnableRedisHttpSession
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

  @Bean
  public EmbeddedRedisServer redisServer() {
    return new EmbeddedRedisServer();
  }

  @Bean
  public JedisConnectionFactory connectionFactory() throws Exception {
    return new JedisConnectionFactory();
  }

  @Bean
  public AuthenticationManager authenticationManager() {
    return new SocialAuthenticationManager();
  }

  protected void configure(HttpSecurity http) throws Exception {
    http.csrf().disable()
      .authorizeRequests().antMatchers("/user/**").hasAuthority("USER")
      .and().formLogin().loginPage("/login").usernameParameter("key").successHandler(getSuccessHandler()).failureHandler(getAuthenticationFailureHandler())
      .and().logout().logoutUrl("/logout").logoutSuccessHandler(getLogoutSuccessHandler()).invalidateHttpSession(true).deleteCookies("SESSION").permitAll()
      .and().exceptionHandling().authenticationEntryPoint(getAuthenticationEntryPoint());
  }

  private AuthenticationEntryPoint getAuthenticationEntryPoint() {
    return (request, response, authException) -> {
      response.setStatus(HttpServletResponse.SC_FORBIDDEN);
    };
  }

  private LogoutSuccessHandler getLogoutSuccessHandler() {
    return (request, response, authentication) -> {
      response.setStatus(HttpServletResponse.SC_NO_CONTENT);
    };
  }

  private AuthenticationFailureHandler getAuthenticationFailureHandler() {
    return (request, response, exception) -> {
      response.setStatus(HttpServletResponse.SC_FORBIDDEN);
    };
  }

  private AuthenticationSuccessHandler getSuccessHandler() {
    return (request, response, authentication) -> {
      response.setStatus(HttpServletResponse.SC_NO_CONTENT);
    };
  }

  public void configure(WebSecurity web) throws Exception {
    web.ignoring().antMatchers("/images/**", "/css/**", "/generate-resources/**", "/modules/**", "/bower_components/**", "/custom-js/**");
  }

}

SecurityWebApplicationInitializer.java

public class SecurityWebApplicationInitializer extends AbstractSecurityWebApplicationInitializer {

  protected String getDispatcherWebApplicationContextSuffix() {
    return AbstractDispatcherServletInitializer.DEFAULT_SERVLET_NAME;
  }
}

SocialAuthenticationManager.java

public class SocialAuthenticationManager implements AuthenticationManager {

  @Resource
  private UserService userService;

  public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    Assert.isInstanceOf(UsernamePasswordAuthenticationToken.class, authentication, "Unsupported authentication type");
    Assert.isTrue(!authentication.isAuthenticated(), "Already authenticated");
    String key = authentication.getPrincipal().toString();
    if (!StringUtils.hasText(key)) {
      throw new InternalAuthenticationServiceException("User key must not be empty.");
    }
    if (!Optional.ofNullable(userService.findUserEntityByKey(key)).isPresent()) {
      throw new InternalAuthenticationServiceException("User does not exist in database.");
    }
    UsernamePasswordAuthenticationToken token = (UsernamePasswordAuthenticationToken) authentication;
    UsernamePasswordAuthenticationToken auth = new UsernamePasswordAuthenticationToken(token.getPrincipal(), token.getPrincipal(), Arrays.asList(new SimpleGrantedAuthority("USER")));
    return auth;
  }
}

WebSocketSecurityConfiguration.java

public class WebSocketSecurityConfiguration extends AbstractSecurityWebSocketMessageBrokerConfigurer {

  protected void configureInbound(MessageSecurityMetadataSourceRegistry messages) {
    messages
      .antMatchers("/user/**", "/queue/**", "/app/user/**").hasAuthority("USER");
  }
}

Most Helpful. Thanks.