H
- the type of HttpSecurityBuilder
that is being configuredpublic final class UrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>> extends AbstractHttpConfigurer<C,H>
DefaultFilterInvocationSecurityMetadataSource
. At least one
RequestMapping
needs to be mapped to
ConfigAttribute
's for this SecurityContextConfigurer
to have meaning.
Usage includes applying the UrlAuthorizationConfigurer
and then modifying the
StandardInterceptUrlRegistry. For example:
protected void configure(HttpSecurity http) throws Exception { http.apply(new UrlAuthorizationConfigurer<HttpSecurity>()).getRegistry() .antMatchers("/users**", "/sessions/**").hasRole("USER") .antMatchers("/signup").hasRole("ANONYMOUS").anyRequest().hasRole("USER"); }The following Filters are populated
SecurityConfigurer
's to
customize:
ExpressionUrlAuthorizationConfigurer
Modifier and Type | Class and Description |
---|---|
class |
UrlAuthorizationConfigurer.AuthorizedUrl
Maps the specified
RequestMatcher instances to ConfigAttribute
instances. |
class |
UrlAuthorizationConfigurer.MvcMatchersAuthorizedUrl
An
ExpressionUrlAuthorizationConfigurer.AuthorizedUrl that allows optionally configuring the
MvcRequestMatcher.setMethod(HttpMethod) |
class |
UrlAuthorizationConfigurer.StandardInterceptUrlRegistry |
Constructor and Description |
---|
UrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context) |
Modifier and Type | Method and Description |
---|---|
void |
configure(H http)
Configure the
SecurityBuilder by setting the necessary properties on the
SecurityBuilder . |
UrlAuthorizationConfigurer.StandardInterceptUrlRegistry |
getRegistry()
The StandardInterceptUrlRegistry is what users will interact with after applying
the
UrlAuthorizationConfigurer . |
UrlAuthorizationConfigurer<H> |
withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor)
Adds an
ObjectPostProcessor for this class. |
disable
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
public UrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
public UrlAuthorizationConfigurer.StandardInterceptUrlRegistry getRegistry()
UrlAuthorizationConfigurer
.public UrlAuthorizationConfigurer<H> withObjectPostProcessor(ObjectPostProcessor<?> objectPostProcessor)
ObjectPostProcessor
for this class.withObjectPostProcessor
in class AbstractHttpConfigurer<UrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>,H extends HttpSecurityBuilder<H>>
objectPostProcessor
- UrlAuthorizationConfigurer
for further customizationspublic void configure(H http) throws java.lang.Exception
SecurityConfigurer
SecurityBuilder
by setting the necessary properties on the
SecurityBuilder
.configure
in interface SecurityConfigurer<DefaultSecurityFilterChain,H extends HttpSecurityBuilder<H>>
configure
in class SecurityConfigurerAdapter<DefaultSecurityFilterChain,H extends HttpSecurityBuilder<H>>
java.lang.Exception