Package org.springframework.security.access.prepost
Contains the infrastructure classes for handling the
@PreAuthorize
, @PreFilter
, @PostAuthorize
and @PostFilter
annotations.
Other than the annotations themselves, the classes should be regarded as for internal framework use and are liable to change without notice.
-
Interface Summary Interface Description PostInvocationAttribute Marker interface for attributes which are created from combined @PostFilter and @PostAuthorize annotations.PostInvocationAuthorizationAdvice Performs filtering and authorization logic after a method is invoked.PreInvocationAttribute Marker interface for attributes which are created from combined @PreFilter and @PreAuthorize annotations.PreInvocationAuthorizationAdvice Performs argument filtering and authorization logic before a method is invoked.PrePostInvocationAttributeFactory -
Class Summary Class Description PostInvocationAdviceProvider AfterInvocationProvider which delegates to aPostInvocationAuthorizationAdvice
instance passing it the PostInvocationAttribute created from @PostAuthorize and @PostFilter annotations.PreInvocationAuthorizationAdviceVoter Voter which performs the actions using a PreInvocationAuthorizationAdvice implementation generated from @PreFilter and @PreAuthorize annotations.PrePostAdviceReactiveMethodInterceptor AMethodInterceptor
that supportsPreAuthorize
andPostAuthorize
for methods that returnMono
orFlux
PrePostAnnotationSecurityMetadataSource MethodSecurityMetadataSource which extracts metadata from the @PreFilter and @PreAuthorize annotations placed on a method. -
Annotation Types Summary Annotation Type Description PostAuthorize Annotation for specifying a method access-control expression which will be evaluated after a method has been invoked.PostFilter Annotation for specifying a method filtering expression which will be evaluated after a method has been invoked.PreAuthorize Annotation for specifying a method access-control expression which will be evaluated to decide whether a method invocation is allowed or not.PreFilter Annotation for specifying a method filtering expression which will be evaluated before a method has been invoked.