org.springframework.security.config.annotation.web.configurers

Class ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry

java.lang.Object

org.springframework.security.config.annotation.web.AbstractRequestMatcherRegistry<C>

org.springframework.security.config.annotation.web.configurers.AbstractConfigAttributeRequestMatcherRegistry<T>

org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry

Enclosing class:

ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>

public class ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
extends AbstractConfigAttributeRequestMatcherRegistry<T>

Constructor Summary

Constructors

Constructor and Description
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry()

Method Summary

Methods

Modifier and Type	Method and Description
R	accessDecisionManager(AccessDecisionManager accessDecisionManager) Allows setting the AccessDecisionManager.
H	and()
protected ExpressionUrlAuthorizationConfigurer.AuthorizedUrl	chainRequestMatchersInternal(List<RequestMatcher> requestMatchers) Subclasses should implement this method for returning the object that is chained to the creation of the RequestMatcher instances.
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry	expressionHandler(SecurityExpressionHandler<FilterInvocation> expressionHandler) Allows customization of the SecurityExpressionHandler to be used.
R	filterSecurityInterceptorOncePerRequest(boolean filterSecurityInterceptorOncePerRequest) Allows setting if the FilterSecurityInterceptor should be only applied once per request (i.e.
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry	withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor) Adds an ObjectPostProcessor for this class.

Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractConfigAttributeRequestMatcherRegistry

chainRequestMatchers

Methods inherited from class org.springframework.security.config.annotation.web.AbstractRequestMatcherRegistry

antMatchers, antMatchers, anyRequest, regexMatchers, regexMatchers, requestMatchers

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry

public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry()

Method Detail

chainRequestMatchersInternal

protected final ExpressionUrlAuthorizationConfigurer.AuthorizedUrl chainRequestMatchersInternal(List<RequestMatcher> requestMatchers)

Description copied from class: AbstractConfigAttributeRequestMatcherRegistry

Subclasses should implement this method for returning the object that is chained to the creation of the RequestMatcher instances.

Specified by:

chainRequestMatchersInternal in class AbstractConfigAttributeRequestMatcherRegistry<ExpressionUrlAuthorizationConfigurer.AuthorizedUrl>

Parameters:

requestMatchers - the RequestMatcher instances that were created

Returns:

the chained Object for the subclass which allows association of something else to the RequestMatcher

expressionHandler

public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry expressionHandler(SecurityExpressionHandler<FilterInvocation> expressionHandler)

Allows customization of the SecurityExpressionHandler to be used. The default is DefaultWebSecurityExpressionHandler

Parameters:

expressionHandler - the SecurityExpressionHandler to be used

Returns:

the ExpressionUrlAuthorizationConfigurer for further customization.

withObjectPostProcessor

public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor)

Adds an ObjectPostProcessor for this class.

Parameters:

objectPostProcessor -

Returns:

the ExpressionUrlAuthorizationConfigurer for further customizations

and

public H and()

accessDecisionManager

public R accessDecisionManager(AccessDecisionManager accessDecisionManager)

Allows setting the AccessDecisionManager. If none is provided, a default is created.

Parameters:

accessDecisionManager - the AccessDecisionManager to use

Returns:

the AbstractInterceptUrlConfigurer for further customization

filterSecurityInterceptorOncePerRequest

public R filterSecurityInterceptorOncePerRequest(boolean filterSecurityInterceptorOncePerRequest)

Allows setting if the FilterSecurityInterceptor should be only applied once per request (i.e. if the filter intercepts on a forward, should it be applied again).

Parameters:

filterSecurityInterceptorOncePerRequest - if the FilterSecurityInterceptor should be only applied once per request

Returns:

the AbstractInterceptUrlConfigurer for further customization