org.springframework.security.config.web.server

Class ServerHttpSecurity.HeaderSpec

java.lang.Object

org.springframework.security.config.web.server.ServerHttpSecurity.HeaderSpec

Enclosing class:

ServerHttpSecurity

public class ServerHttpSecurity.HeaderSpec
extends java.lang.Object

Configures HTTP Response Headers.

Since:

5.0

See Also:

ServerHttpSecurity.headers()

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
class	ServerHttpSecurity.HeaderSpec.CacheSpec Configures cache control headers
class	ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec The content type headers
class	ServerHttpSecurity.HeaderSpec.FrameOptionsSpec Configures frame options response header
class	ServerHttpSecurity.HeaderSpec.HstsSpec Configures Strict Transport Security response header
class	ServerHttpSecurity.HeaderSpec.XssProtectionSpec Configures x-xss-protection response header

Method Summary

Modifier and Type	Method and Description
ServerHttpSecurity	and() Allows method chaining to continue configuring the ServerHttpSecurity
ServerHttpSecurity.HeaderSpec.CacheSpec	cache() Configures cache control headers
protected void	configure(ServerHttpSecurity http)
ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec	contentTypeOptions() Configures content type response headers
ServerHttpSecurity	disable() Disables http response headers
ServerHttpSecurity.HeaderSpec.FrameOptionsSpec	frameOptions() Configures frame options response headers
ServerHttpSecurity.HeaderSpec.HstsSpec	hsts() Configures the Strict Transport Security response headers
ServerHttpSecurity.HeaderSpec.XssProtectionSpec	xssProtection() Configures x-xss-protection response header.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

and

public ServerHttpSecurity and()

Allows method chaining to continue configuring the ServerHttpSecurity

Returns:

the ServerHttpSecurity to continue configuring

disable

public ServerHttpSecurity disable()

Disables http response headers

Returns:

the ServerHttpSecurity to continue configuring

cache

public ServerHttpSecurity.HeaderSpec.CacheSpec cache()

Configures cache control headers

Returns:

the ServerHttpSecurity.HeaderSpec.CacheSpec to configure

contentTypeOptions

public ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec contentTypeOptions()

Configures content type response headers

Returns:

the ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec to configure

frameOptions

public ServerHttpSecurity.HeaderSpec.FrameOptionsSpec frameOptions()

Configures frame options response headers

Returns:

the ServerHttpSecurity.HeaderSpec.FrameOptionsSpec to configure

hsts

public ServerHttpSecurity.HeaderSpec.HstsSpec hsts()

Configures the Strict Transport Security response headers

Returns:

the ServerHttpSecurity.HeaderSpec.HstsSpec to configure

configure

protected void configure(ServerHttpSecurity http)

xssProtection

public ServerHttpSecurity.HeaderSpec.XssProtectionSpec xssProtection()

Configures x-xss-protection response header.

Returns:

the ServerHttpSecurity.HeaderSpec.XssProtectionSpec to configure