Class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>
- java.lang.Object
-
- org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>
-
- org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<C,H>
-
- org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer<ExpressionUrlAuthorizationConfigurer<H>,H>
-
- org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer<H>
-
- Type Parameters:
H
- the type ofHttpSecurityBuilder
that is being configured
- All Implemented Interfaces:
SecurityConfigurer<DefaultSecurityFilterChain,H>
public final class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>> extends AbstractInterceptUrlConfigurer<ExpressionUrlAuthorizationConfigurer<H>,H>
Adds URL based authorization based upon SpEL expressions to an application. At least oneRequestMapping
needs to be mapped toConfigAttribute
's for thisSecurityContextConfigurer
to have meaning.Security Filters
The following Filters are populatedShared Objects Created
The following shared objects are populated to allow otherSecurityConfigurer
's to customize:Shared Objects Used
AuthenticationTrustResolver
is optionally used to populate theDefaultWebSecurityExpressionHandler
- Since:
- 3.2
- See Also:
HttpSecurity.authorizeRequests()
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description class
ExpressionUrlAuthorizationConfigurer.AuthorizedUrl
class
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
class
ExpressionUrlAuthorizationConfigurer.MvcMatchersAuthorizedUrl
AnExpressionUrlAuthorizationConfigurer.AuthorizedUrl
that allows optionally configuring theMvcRequestMatcher.setMethod(HttpMethod)
-
Nested classes/interfaces inherited from class org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer
AbstractInterceptUrlConfigurer.AbstractInterceptUrlRegistry<R extends AbstractInterceptUrlConfigurer.AbstractInterceptUrlRegistry<R,T>,T>
-
-
Constructor Summary
Constructors Constructor Description ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Creates a new instance
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
getRegistry()
-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer
configure
-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, withObjectPostProcessor
-
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
-
-
-
Constructor Detail
-
ExpressionUrlAuthorizationConfigurer
public ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Creates a new instance- See Also:
HttpSecurity.authorizeRequests()
-
-
Method Detail
-
getRegistry
public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry getRegistry()
-
-