org.springframework.security.config.annotation.web.configurers

Class ServletApiConfigurer<H extends HttpSecurityBuilder<H>>

java.lang.Object

org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>

org.springframework.security.config.annotation.web.configurers.ServletApiConfigurer<H>

All Implemented Interfaces:

SecurityConfigurer<DefaultSecurityFilterChain,H>

public final class ServletApiConfigurer<H extends HttpSecurityBuilder<H>>
extends SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>

Implements select methods from the HttpServletRequest using the SecurityContext from the SecurityContextHolder.

Security Filters

The following Filters are populated

• SecurityContextHolderAwareRequestFilter

Shared Objects Created

No shared objects are created.

Shared Objects Used

• AuthenticationTrustResolver is optionally used to populate the SecurityContextHolderAwareRequestFilter

Since:

3.2

Constructor Summary

Constructors

Constructor and Description
ServletApiConfigurer() Creates a new instance

Method Summary

Methods

Modifier and Type	Method and Description
void	configure(H http) Configure the SecurityBuilder by setting the necessary properties on the SecurityBuilder.
B	disable() Disables the AbstractHttpConfigurer by removing it.
ServletApiConfigurer<H>	rolePrefix(String rolePrefix)
T	withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor)

Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter

addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ServletApiConfigurer

public ServletApiConfigurer()

Creates a new instance

See Also:

HttpSecurity.servletApi()

Method Detail

rolePrefix

public ServletApiConfigurer<H> rolePrefix(String rolePrefix)

configure

public void configure(H http)
               throws Exception

Description copied from interface: SecurityConfigurer

Configure the SecurityBuilder by setting the necessary properties on the SecurityBuilder.

Specified by:

configure in interface SecurityConfigurer<DefaultSecurityFilterChain,H extends HttpSecurityBuilder<H>>

Overrides:

configure in class SecurityConfigurerAdapter<DefaultSecurityFilterChain,H extends HttpSecurityBuilder<H>>

Throws:

Exception

disable

public B disable()

Disables the AbstractHttpConfigurer by removing it. After doing so a fresh version of the configuration can be applied.

Returns:

the HttpSecurityBuilder for additional customizations

withObjectPostProcessor

public T withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor)