Package org.springframework.security.authorization
@NullMarked
package org.springframework.security.authorization
-
ClassDescriptionAn
AuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains all the specified authorities.AReactiveAuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains all the specified authorities.AnAuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains aFactorGrantedAuthority
that is not expired for eachRequiredFactor
.A builder forAllFactorsAuthorizationManager
.AnAuthorizationManager
that determines if the current user is authenticated.AReactiveAuthorizationManager
that determines if the current user is authenticated.AnAuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains any of the specified authorities.Represents anAuthorizationDecision
based on a collection of authoritiesAnAuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains a specified authority.AReactiveAuthorizationManager
that determines if the current user is authorized by evaluating if theAuthentication
contains a specified authority.AnAccessDeniedException
that contains theAuthorizationResult
A contract for publishing authorization eventsAuthorizationManager<T extends @Nullable Object>An Authorization manager which can determine if anAuthentication
has access to a specific object.AuthorizationManagerFactory<T extends @Nullable Object>A factory for creating different kinds ofAuthorizationManager
instances.A factory class to create anAuthorizationManager
instances.AnObservation.Context
used during authorizationsAnObservationConvention
for translating authorizations intoKeyValues
.A factory for wrapping arbitrary objects in authorization-related adviceRepresents an authorization resultDefaultAuthorizationManagerFactory<T extends @Nullable Object>A factory for creating different kinds ofAuthorizationManager
instances.A builder that allows creatingDefaultAuthorizationManagerFactory
with additional authorization for common scenarios.Represents anAuthorizationDecision
based on aExpression
AnAuthorizationResult
that containsRequiredFactorError
.AnAuthorizationManager
that observes the authorizationAnReactiveAuthorizationManager
that observes the authenticationA reactive authorization manager which can determine if anAuthentication
has access to a specific object.The requirements for anFactorGrantedAuthority
to be considered valid.A builder forRequiredFactor
.An error when the requirements ofRequiredFactor
are not met.AnAuthorizationManager
which creates permit-all and deny-allAuthorizationManager
instances.An implementation ofAuthorizationEventPublisher
that uses Spring's event publishing support.