Class HandlerMappingIntrospector
- All Implemented Interfaces:
Aware,InitializingBean,ApplicationContextAware,CorsConfigurationSource
HandlerMapping that would
serve a specific request.
Provides the following methods:
getMatchableHandlerMapping(jakarta.servlet.http.HttpServletRequest)— obtain aHandlerMappingto check request-matching criteria against.getCorsConfiguration(jakarta.servlet.http.HttpServletRequest)— obtain the CORS configuration for the request.
Note that this is primarily an SPI to allow Spring Security to align its pattern matching with the same pattern matching that would be used in Spring MVC for a given request, in order to avoid security issues.
Use of this component incurs the performance overhead of mapping the
request, and should not be repeated multiple times per request.
createCacheFilter() exposes a Filter to cache the results.
Applications that rely on Spring Security don't need to deploy this Filter
since Spring Security doe that. However, other custom security layers, used
in place of Spring Security that use this component should deploy the cache
Filter with requirements described in the Javadoc for the method.
- Since:
- 4.3.1
- Author:
- Rossen Stoyanchev
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic final classContainer for aMatchableHandlerMappingandCorsConfigurationfor a given request matched by dispatcher type and requestURI. -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidInvoked by the containingBeanFactoryafter it has set all bean properties and satisfiedBeanFactoryAware,ApplicationContextAwareetc.Filterthat looks up theMatchableHandlerMappingandCorsConfigurationfor the request proactively before delegating to the rest of the chain, caching the result in a request attribute, and restoring it after the chain returns.getCorsConfiguration(HttpServletRequest request) Return aCorsConfigurationbased on the incoming request.Return the configured or detectedHandlerMappings.Find theHandlerMappingthat would handle the given request and return aMatchableHandlerMappingto use for path matching.voidresetCache(ServletRequest request, HandlerMappingIntrospector.CachedResult cachedResult) Restore a previousHandlerMappingIntrospector.CachedResult.voidsetApplicationContext(ApplicationContext applicationContext) Set the ApplicationContext that this object runs in.setCache(HttpServletRequest request) Perform a lookup and save theHandlerMappingIntrospector.CachedResultas a request attribute.
-
Constructor Details
-
HandlerMappingIntrospector
public HandlerMappingIntrospector()
-
-
Method Details
-
setApplicationContext
Description copied from interface:ApplicationContextAwareSet the ApplicationContext that this object runs in. Normally this call will be used to initialize the object.Invoked after population of normal bean properties but before an init callback such as
InitializingBean.afterPropertiesSet()or a custom init-method. Invoked afterResourceLoaderAware.setResourceLoader(org.springframework.core.io.ResourceLoader),ApplicationEventPublisherAware.setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher)andMessageSourceAware, if applicable.- Specified by:
setApplicationContextin interfaceApplicationContextAware- Parameters:
applicationContext- the ApplicationContext object to be used by this object- See Also:
-
afterPropertiesSet
public void afterPropertiesSet()Description copied from interface:InitializingBeanInvoked by the containingBeanFactoryafter it has set all bean properties and satisfiedBeanFactoryAware,ApplicationContextAwareetc.This method allows the bean instance to perform validation of its overall configuration and final initialization when all bean properties have been set.
- Specified by:
afterPropertiesSetin interfaceInitializingBean
-
getHandlerMappings
Return the configured or detectedHandlerMappings. -
createCacheFilter
Filterthat looks up theMatchableHandlerMappingandCorsConfigurationfor the request proactively before delegating to the rest of the chain, caching the result in a request attribute, and restoring it after the chain returns.Note: Applications that rely on Spring Security do not use this component directly and should not deploy the filter instead allowing Spring Security to do it. Other custom security layers used in place of Spring Security that also rely on
HandlerMappingIntrospectorshould deploy this filter ahead of other filters where lookups are performed, and should also make sure the filter is configured to handle all dispatcher types.- Returns:
- the Filter instance to use
- Since:
- 6.0.14
-
setCache
Perform a lookup and save theHandlerMappingIntrospector.CachedResultas a request attribute. This method can be invoked from a filter before subsequent calls togetMatchableHandlerMapping(HttpServletRequest)andgetCorsConfiguration(HttpServletRequest)to avoid repeated lookups.- Parameters:
request- the current request- Returns:
- the previous
HandlerMappingIntrospector.CachedResult, if there is one from a parent dispatch - Since:
- 6.0.14
-
resetCache
public void resetCache(ServletRequest request, @Nullable HandlerMappingIntrospector.CachedResult cachedResult) Restore a previousHandlerMappingIntrospector.CachedResult. This method can be invoked from a filter after delegating to the rest of the chain.- Since:
- 6.0.14
-
getMatchableHandlerMapping
@Nullable public MatchableHandlerMapping getMatchableHandlerMapping(HttpServletRequest request) throws Exception Find theHandlerMappingthat would handle the given request and return aMatchableHandlerMappingto use for path matching.- Parameters:
request- the current request- Returns:
- the resolved
MatchableHandlerMapping, ornull - Throws:
IllegalStateException- if the matching HandlerMapping is not an instance ofMatchableHandlerMappingException- if any of the HandlerMapping's raise an exception
-
getCorsConfiguration
Description copied from interface:CorsConfigurationSourceReturn aCorsConfigurationbased on the incoming request.- Specified by:
getCorsConfigurationin interfaceCorsConfigurationSource- Returns:
- the associated
CorsConfiguration, ornullif none
-