org.springframework.security.config.web.server

Class ServerHttpSecurity.HeaderSpec

java.lang.Object

org.springframework.security.config.web.server.ServerHttpSecurity.HeaderSpec

Enclosing class:

ServerHttpSecurity

public class ServerHttpSecurity.HeaderSpec
extends java.lang.Object

Configures HTTP Response Headers.

Since:

5.0

See Also:

ServerHttpSecurity.headers()

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
class	ServerHttpSecurity.HeaderSpec.CacheSpec Configures cache control headers
class	ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec Configures Content-Security-Policy response header.
class	ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec The content type headers
class	ServerHttpSecurity.HeaderSpec.FeaturePolicySpec Configures Feature-Policy response header.
class	ServerHttpSecurity.HeaderSpec.FrameOptionsSpec Configures frame options response header
class	ServerHttpSecurity.HeaderSpec.HstsSpec Configures Strict Transport Security response header
class	ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec Configures Referrer-Policy response header.
class	ServerHttpSecurity.HeaderSpec.XssProtectionSpec Configures x-xss-protection response header

Method Summary

Modifier and Type	Method and Description
ServerHttpSecurity	and() Allows method chaining to continue configuring the ServerHttpSecurity
ServerHttpSecurity.HeaderSpec.CacheSpec	cache() Configures cache control headers
protected void	configure(ServerHttpSecurity http)
ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec	contentSecurityPolicy(java.lang.String policyDirectives) Configures Content-Security-Policy response header.
ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec	contentTypeOptions() Configures content type response headers
ServerHttpSecurity	disable() Disables http response headers
ServerHttpSecurity.HeaderSpec.FeaturePolicySpec	featurePolicy(java.lang.String policyDirectives) Configures Feature-Policy response header.
ServerHttpSecurity.HeaderSpec.FrameOptionsSpec	frameOptions() Configures frame options response headers
ServerHttpSecurity.HeaderSpec.HstsSpec	hsts() Configures the Strict Transport Security response headers
ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec	referrerPolicy() Configures Referrer-Policy response header.
ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec	referrerPolicy(ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy referrerPolicy) Configures Referrer-Policy response header.
ServerHttpSecurity.HeaderSpec.XssProtectionSpec	xssProtection() Configures x-xss-protection response header.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

and

public ServerHttpSecurity and()

Allows method chaining to continue configuring the ServerHttpSecurity

Returns:

the ServerHttpSecurity to continue configuring

disable

public ServerHttpSecurity disable()

Disables http response headers

Returns:

the ServerHttpSecurity to continue configuring

cache

public ServerHttpSecurity.HeaderSpec.CacheSpec cache()

Configures cache control headers

Returns:

the ServerHttpSecurity.HeaderSpec.CacheSpec to configure

contentTypeOptions

public ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec contentTypeOptions()

Configures content type response headers

Returns:

the ServerHttpSecurity.HeaderSpec.ContentTypeOptionsSpec to configure

frameOptions

public ServerHttpSecurity.HeaderSpec.FrameOptionsSpec frameOptions()

Configures frame options response headers

Returns:

the ServerHttpSecurity.HeaderSpec.FrameOptionsSpec to configure

hsts

public ServerHttpSecurity.HeaderSpec.HstsSpec hsts()

Configures the Strict Transport Security response headers

Returns:

the ServerHttpSecurity.HeaderSpec.HstsSpec to configure

configure

protected void configure(ServerHttpSecurity http)

xssProtection

public ServerHttpSecurity.HeaderSpec.XssProtectionSpec xssProtection()

Configures x-xss-protection response header.

Returns:

the ServerHttpSecurity.HeaderSpec.XssProtectionSpec to configure

contentSecurityPolicy

public ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec contentSecurityPolicy(java.lang.String policyDirectives)

Configures Content-Security-Policy response header.

Parameters:

policyDirectives - the policy directive(s)

Returns:

the ServerHttpSecurity.HeaderSpec.ContentSecurityPolicySpec to configure

featurePolicy

public ServerHttpSecurity.HeaderSpec.FeaturePolicySpec featurePolicy(java.lang.String policyDirectives)

Configures Feature-Policy response header.

Parameters:

policyDirectives - the policy directive(s)

Returns:

the ServerHttpSecurity.HeaderSpec.FeaturePolicySpec to configure

referrerPolicy

public ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec referrerPolicy(ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy referrerPolicy)

Configures Referrer-Policy response header.

Parameters:

referrerPolicy - the policy to use

Returns:

the ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec to configure

referrerPolicy

public ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec referrerPolicy()

Configures Referrer-Policy response header.

Returns:

the ServerHttpSecurity.HeaderSpec.ReferrerPolicySpec to configure