Package org.springframework.security.authorization

Interface AuthorizationManager<T extends @Nullable Object>

Type Parameters:
T - the type of object that the authorization check is being done on.
All Known Implementing Classes:
AllAuthoritiesAuthorizationManager, AllRequiredFactorsAuthorizationManager, AuthenticatedAuthorizationManager, AuthoritiesAuthorizationManager, AuthorityAuthorizationManager, IpAddressAuthorizationManager, Jsr250AuthorizationManager, MessageMatcherDelegatingAuthorizationManager, MethodExpressionAuthorizationManager, ObservationAuthorizationManager, PostAuthorizeAuthorizationManager, PreAuthorizeAuthorizationManager, RequestMatcherDelegatingAuthorizationManager, RequiredAuthoritiesAuthorizationManager, SecuredAuthorizationManager, SingleResultAuthorizationManager, WebExpressionAuthorizationManager
Functional Interface:
This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.
@FunctionalInterface public interface AuthorizationManager<T extends @Nullable Object>
An Authorization manager which can determine if an Authentication has access to a specific object.

  • Method Summary

    Modifier and Type
    Method
    Description
    @Nullable AuthorizationResult
    authorize(Supplier<? extends @Nullable Authentication> authentication, T object)
    Determines if access is granted for a specific authentication and object.
    default void
    verify(Supplier<? extends @Nullable Authentication> authentication, T object)
    Determines if access should be granted for a specific authentication and object.