Package org.springframework.security.authorization

@NullMarked package org.springframework.security.authorization

Core authorization support, including AuthorizationManager implementations.

Related Packages

Package	Description
org.springframework.security.authorization.event	Events published during authorization decisions.
org.springframework.security.authorization.method	Support for enforcing authorization rules on method invocations.

Class	Description
AllAuthoritiesAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains all the specified authorities.
AllAuthoritiesReactiveAuthorizationManager<T>	A ReactiveAuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains all the specified authorities.
AllRequiredFactorsAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains a FactorGrantedAuthority that is not expired for each RequiredFactor.
AllRequiredFactorsAuthorizationManager.Builder<T>	A builder for AllRequiredFactorsAuthorizationManager.
AuthenticatedAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authenticated.
AuthenticatedReactiveAuthorizationManager<T>	A ReactiveAuthorizationManager that determines if the current user is authenticated.
AuthoritiesAuthorizationManager	An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains any of the specified authorities.
AuthorityAuthorizationDecision	Represents an AuthorizationDecision based on a collection of authorities.
AuthorityAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains a specified authority.
AuthorityReactiveAuthorizationManager<T>	A ReactiveAuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains a specified authority.
AuthorizationDecision	The result of an authorization decision indicating whether access is granted.
AuthorizationDeniedException	An AccessDeniedException that contains the AuthorizationResult.
AuthorizationEventPublisher	A contract for publishing authorization events.
AuthorizationManager<T extends @Nullable Object>	An Authorization manager which can determine if an Authentication has access to a specific object.
AuthorizationManagerFactories	Creates common AuthorizationManagerFactory instances.
AuthorizationManagerFactories.AdditionalRequiredFactorsBuilder<T>	A builder that allows creating DefaultAuthorizationManagerFactory with additional requirements for RequiredFactors.
AuthorizationManagerFactory<T extends @Nullable Object>	A factory for creating different kinds of AuthorizationManager instances.
AuthorizationManagers	A factory class to create an AuthorizationManager instances.
AuthorizationObservationContext<T>	An Observation.Context used during authorizations.
AuthorizationObservationConvention	An ObservationConvention for translating authorizations into KeyValues.
AuthorizationProxyFactory	A factory for wrapping arbitrary objects in authorization-related advice.
AuthorizationResult	Represents an authorization result.
ConditionalAuthorizationManager<T>	An AuthorizationManager that delegates to one of two AuthorizationManager instances based on a condition evaluated against the current Authentication.
ConditionalAuthorizationManager.Builder<T>	A builder for ConditionalAuthorizationManager.
DefaultAuthorizationManagerFactory<T extends @Nullable Object>	A factory for creating different kinds of AuthorizationManager instances.
ExpressionAuthorizationDecision	Represents an AuthorizationDecision based on a Expression.
FactorAuthorizationDecision	An AuthorizationResult that contains RequiredFactorError.
MapRequiredAuthoritiesRepository	A Map based implementation of RequiredAuthoritiesRepository.
ObservationAuthorizationManager<T>	An AuthorizationManager that observes the authorization.
ObservationReactiveAuthorizationManager<T>	An ReactiveAuthorizationManager that observes the authentication.
ReactiveAuthorizationManager<T>	A reactive authorization manager which can determine if an Authentication has access to a specific object.
RequiredAuthoritiesAuthorizationManager<T>	An AuthorizationManager that requires all the authorities returned by a RequiredAuthoritiesRepository implementation.
RequiredAuthoritiesRepository	Finds additional required authorities for the provided Principal.getName().
RequiredFactor	The requirements for an GrantedAuthority to be considered a valid factor.
RequiredFactor.Builder	A builder for RequiredFactor.
RequiredFactorError	An error when the requirements of RequiredFactor are not met.
SingleResultAuthorizationManager<C>	An AuthorizationManager which creates permit-all and deny-all AuthorizationManager instances.
SpringAuthorizationEventPublisher	An implementation of AuthorizationEventPublisher that uses Spring's event publishing support.