Package org.springframework.security.authorization.method

@NullMarked package org.springframework.security.authorization.method

Support for enforcing authorization rules on method invocations.

Related Packages

Package	Description
org.springframework.security.authorization	Core authorization support, including AuthorizationManager implementations.
org.springframework.security.authorization.event	Events published during authorization decisions.

Class	Description
AuthorizationAdvisor	An interface that indicates method security advice.
AuthorizationAdvisorProxyFactory	A proxy factory for applying authorization advice to an arbitrary object.
AuthorizationAdvisorProxyFactory.TargetVisitor	An interface to handle how the AuthorizationAdvisorProxyFactory should step through the target's object hierarchy.
AuthorizationInterceptorsOrder	Ordering of Spring Security's authorization Advisors.
AuthorizationManagerAfterMethodInterceptor	A MethodInterceptor which can determine if an Authentication has access to the result of an MethodInvocation using an AuthorizationManager.
AuthorizationManagerAfterReactiveMethodInterceptor	A MethodInterceptor which can determine if an Authentication has access to the returned object from the MethodInvocation using the configured ReactiveAuthorizationManager.
AuthorizationManagerBeforeMethodInterceptor	A MethodInterceptor which uses a AuthorizationManager to determine if an Authentication may invoke the given MethodInvocation.
AuthorizationManagerBeforeReactiveMethodInterceptor	A MethodInterceptor which can determine if an Authentication has access to the MethodInvocation using the configured ReactiveAuthorizationManager.
AuthorizationProxy	An interface that is typically implemented by Spring Security's AOP support to identify an instance as being proxied by Spring Security.
AuthorizeReturnObject	Wraps Spring Security method authorization advice around the return object of any method this annotation is applied to.
AuthorizeReturnObjectMethodInterceptor	A method interceptor that applies the given AuthorizationProxyFactory to any return value annotated with AuthorizeReturnObject.
HandleAuthorizationDenied	Annotation for specifying handling behavior when an authorization denied happens in method security or an AuthorizationDeniedException is thrown during method invocation.
Jsr250AuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating if the Authentication contains a specified authority from the JSR-250 security annotations.
MethodAuthorizationDeniedHandler	An interface used to define a strategy to handle denied method invocations.
MethodExpressionAuthorizationManager	An expression-based AuthorizationManager that determines the access by evaluating the provided expression against the MethodInvocation.
MethodInvocationResult	A context object that contains a MethodInvocation and the result of that MethodInvocation.
NullReturningMethodAuthorizationDeniedHandler	An implementation of MethodAuthorizationDeniedHandler that return null.
PostAuthorizeAuthorizationManager	An AuthorizationManager which can determine if an Authentication may return the result from an invoked MethodInvocation by evaluating an expression from the PostAuthorize annotation.
PostAuthorizeReactiveAuthorizationManager	A ReactiveAuthorizationManager which can determine if an Authentication has access to the returned object from the MethodInvocation by evaluating an expression from the PostAuthorize annotation.
PostFilterAuthorizationMethodInterceptor	A MethodInterceptor which filters a returnedObject from the MethodInvocation by evaluating an expression from the PostFilter annotation.
PostFilterAuthorizationReactiveMethodInterceptor	A MethodInterceptor which filters the returned object from the MethodInvocation by evaluating an expression from the PostFilter annotation.
PreAuthorizeAuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating an expression from the PreAuthorize annotation.
PreAuthorizeReactiveAuthorizationManager	A ReactiveAuthorizationManager which can determine if an Authentication has access to the MethodInvocation by evaluating an expression from the PreAuthorize annotation.
PreFilterAuthorizationMethodInterceptor	A MethodInterceptor which filters a method argument by evaluating an expression from the PreFilter annotation.
PreFilterAuthorizationReactiveMethodInterceptor	A MethodInterceptor which filters a reactive method argument by evaluating an expression from the PreFilter annotation.
SecuredAuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating if the Authentication contains a specified authority from the Spring Security's Secured annotation.
ThrowingMethodAuthorizationDeniedHandler	An implementation of MethodAuthorizationDeniedHandler that throws AuthorizationDeniedException.