Package org.springframework.security.data.repository.query

Class SecurityEvaluationContextExtension

java.lang.Object
org.springframework.security.data.repository.query.SecurityEvaluationContextExtension
All Implemented Interfaces:
org.springframework.data.spel.spi.EvaluationContextExtension, org.springframework.data.spel.spi.ExtensionIdAware
public class SecurityEvaluationContextExtension extends Object implements org.springframework.data.spel.spi.EvaluationContextExtension

By defining this object as a Bean, Spring Security is exposed as SpEL expressions for creating Spring Data queries.

With Java based configuration, we can define the bean using the following:

For example, if you return a UserDetails that extends the following User object: 

 @Entity
 public class User {
     @GeneratedValue(strategy = GenerationType.AUTO)
     @Id
     private Long id;

     ...
 }

And you have a Message object that looks like the following: 

 @Entity
 public class Message {
     @Id
     @GeneratedValue(strategy = GenerationType.AUTO)
     private Long id;

     @OneToOne
     private User to;

     ...
 }
You can use the following Query annotation to search for only messages that are to the current user: 
 @Repository
 public interface SecurityMessageRepository extends MessageRepository {

        @Query("select m from Message m where m.to.id = ?#{ principal?.id }")
        List<Message> findAll();
 }
This works because the principal in this instance is a User which has an id field on it.
Since:
4.0