Class PostAuthorizeAuthorizationManager
- java.lang.Object
-
- org.springframework.security.authorization.method.PostAuthorizeAuthorizationManager
-
- All Implemented Interfaces:
AuthorizationManager<MethodInvocationResult>
public final class PostAuthorizeAuthorizationManager extends java.lang.Object implements AuthorizationManager<MethodInvocationResult>
AnAuthorizationManager
which can determine if anAuthentication
may return the result from an invokedMethodInvocation
by evaluating an expression from thePostAuthorize
annotation.- Since:
- 5.6
-
-
Constructor Summary
Constructors Constructor Description PostAuthorizeAuthorizationManager()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description AuthorizationDecision
check(java.util.function.Supplier<Authentication> authentication, MethodInvocationResult mi)
Determine if anAuthentication
has access to the returned object by evaluating thePostAuthorize
annotation that theMethodInvocation
specifies.void
setExpressionHandler(MethodSecurityExpressionHandler expressionHandler)
Use this theMethodSecurityExpressionHandler
.-
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
-
Methods inherited from interface org.springframework.security.authorization.AuthorizationManager
verify
-
-
-
-
Method Detail
-
setExpressionHandler
public void setExpressionHandler(MethodSecurityExpressionHandler expressionHandler)
Use this theMethodSecurityExpressionHandler
.- Parameters:
expressionHandler
- theMethodSecurityExpressionHandler
to use
-
check
public AuthorizationDecision check(java.util.function.Supplier<Authentication> authentication, MethodInvocationResult mi)
Determine if anAuthentication
has access to the returned object by evaluating thePostAuthorize
annotation that theMethodInvocation
specifies.- Specified by:
check
in interfaceAuthorizationManager<MethodInvocationResult>
- Parameters:
authentication
- theSupplier
of theAuthentication
to checkmi
- theMethodInvocationResult
to check- Returns:
- an
AuthorizationDecision
ornull
if thePostAuthorize
annotation is not present
-
-