Class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>
- java.lang.Object
-
- org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>
-
- org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<C,H>
-
- org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer<H>
-
- Type Parameters:
H
- the type ofHttpSecurityBuilder
that is being configured
- All Implemented Interfaces:
SecurityConfigurer<DefaultSecurityFilterChain,H>
public final class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>> extends AbstractHttpConfigurer<C,H>
Adds URL based authorization based upon SpEL expressions to an application. At least oneRequestMapping
needs to be mapped toConfigAttribute
's for thisSecurityContextConfigurer
to have meaning.Security Filters
The following Filters are populatedShared Objects Created
The following shared objects are populated to allow otherSecurityConfigurer
's to customize:Shared Objects Used
AuthenticationTrustResolver
is optionally used to populate theDefaultWebSecurityExpressionHandler
- Since:
- 3.2
- See Also:
HttpSecurity.authorizeRequests()
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description class
ExpressionUrlAuthorizationConfigurer.AuthorizedUrl
class
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
class
ExpressionUrlAuthorizationConfigurer.MvcMatchersAuthorizedUrl
AnExpressionUrlAuthorizationConfigurer.AuthorizedUrl
that allows optionally configuring theMvcRequestMatcher.setMethod(HttpMethod)
-
Constructor Summary
Constructors Constructor Description ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Creates a new instance
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
configure(H http)
Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
getRegistry()
-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, withObjectPostProcessor
-
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
-
-
-
Constructor Detail
-
ExpressionUrlAuthorizationConfigurer
public ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Creates a new instance- See Also:
HttpSecurity.authorizeRequests()
-
-
Method Detail
-
getRegistry
public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry getRegistry()
-
configure
public void configure(H http) throws java.lang.Exception
Description copied from interface:SecurityConfigurer
Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.- Specified by:
configure
in interfaceSecurityConfigurer<C extends org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer<C,H>,H extends HttpSecurityBuilder<H>>
- Overrides:
configure
in classSecurityConfigurerAdapter<DefaultSecurityFilterChain,H extends HttpSecurityBuilder<H>>
- Throws:
java.lang.Exception
-
-