All Classes

Class	Description
AbstractAccessDecisionManager	Abstract implementation of AccessDecisionManager.
AbstractAclProvider	Abstract AfterInvocationProvider which provides commonly-used ACL-related services.
AbstractAclVoter	Provides helper methods for writing domain object ACL voters.
AbstractAuthenticationEvent	Represents an application authentication event.
AbstractAuthenticationFailureEvent	Abstract application event which indicates authentication failure for some reason.
AbstractAuthenticationFilterConfigurer<B extends HttpSecurityBuilder<B>,T extends AbstractAuthenticationFilterConfigurer<B,T,F>,F extends AbstractAuthenticationProcessingFilter>	Base class for configuring AbstractAuthenticationFilterConfigurer.
AbstractAuthenticationProcessingFilter	Abstract processor of browser-based HTTP-based authentication requests.
AbstractAuthenticationTargetUrlRequestHandler	Base class containing the logic used by strategies which handle redirection to a URL and are passed an Authentication object as part of the contract.
AbstractAuthenticationToken	Base class for Authentication objects.
AbstractAuthorizationEvent	Abstract superclass for all security interception related events.
AbstractAuthorizeTag	A base class for an <authorize> tag that is independent of the tag rendering technology (JSP, Facelets).
AbstractCasAssertionUserDetailsService	Abstract class for using the provided CAS assertion to construct a new User object.
AbstractConfigAttributeRequestMatcherRegistry<C>	A base class for registering RequestMatcher's.
AbstractConfiguredSecurityBuilder<O,B extends SecurityBuilder<O>>	A base SecurityBuilder that allows SecurityConfigurer to be applied to it.
AbstractDaoAuthenticationConfigurer<B extends ProviderManagerBuilder<B>,C extends AbstractDaoAuthenticationConfigurer<B,C,U>,U extends UserDetailsService>	Allows configuring a DaoAuthenticationProvider
AbstractFallbackMethodSecurityMetadataSource	Abstract implementation of MethodSecurityMetadataSource that supports both Spring AOP and AspectJ and performs attribute resolution from: 1.
AbstractHttpConfigurer<T extends AbstractHttpConfigurer<T,B>,B extends HttpSecurityBuilder<B>>	Adds a convenient base class for SecurityConfigurer instances that operate on HttpSecurity.
AbstractInterceptUrlConfigurer<C extends AbstractInterceptUrlConfigurer<C,H>,H extends HttpSecurityBuilder<H>>	A base class for configuring the FilterSecurityInterceptor.
AbstractJaasAuthenticationProvider	An AuthenticationProvider implementation that retrieves user details from a JAAS login configuration.
AbstractLdapAuthenticationManagerFactory<T extends AbstractLdapAuthenticator>	Creates an AuthenticationManager that can perform LDAP authentication.
AbstractLdapAuthenticationProvider	Base class for the standard LdapAuthenticationProvider and the ActiveDirectoryLdapAuthenticationProvider.
AbstractLdapAuthenticator	Base class for the authenticator implementations.
AbstractMessageMatcherComposite<T>	Abstract MessageMatcher containing multiple MessageMatcher
AbstractMethodSecurityMetadataSource	Abstract implementation of MethodSecurityMetadataSource which resolves the secured object type to a MethodInvocation.
AbstractOAuth2AuthorizationGrantRequest	Base implementation of an OAuth 2.0 Authorization Grant request that holds an authorization grant credential and is used when initiating a request to the Authorization Server's Token Endpoint.
AbstractOAuth2Token	Base class for OAuth 2.0 Token implementations.
AbstractOAuth2TokenAuthenticationToken<T extends AbstractOAuth2Token>	Base class for AbstractAuthenticationToken implementations that expose common attributes between different OAuth 2.0 Access Token Formats.
AbstractPasswordEncoder	Abstract base class for password encoders
AbstractPermission	Provides an abstract superclass for Permission implementations.
AbstractPreAuthenticatedProcessingFilter	Base class for processing filters that handle pre-authenticated authentication requests, where it is assumed that the principal has already been authenticated by an external system.
AbstractRememberMeServices	Base class for RememberMeServices implementations.
AbstractRequestMatcherRegistry<C>	A base class for registering RequestMatcher's.
AbstractRequestParameterAllowFromStrategy	Deprecated. ALLOW-FROM is an obsolete directive that no longer works in modern browsers.
AbstractRetryEntryPoint
AbstractSaml2AuthenticationRequest	Data holder for AuthNRequest parameters to be sent using either the Saml2MessageBinding.POST or Saml2MessageBinding.REDIRECT binding.
AbstractSaml2AuthenticationRequest.Builder<T extends AbstractSaml2AuthenticationRequest.Builder<T>>	A builder for AbstractSaml2AuthenticationRequest and its subclasses.
AbstractSecurityBuilder<O>	A base SecurityBuilder that ensures the object being built is only built one time.
AbstractSecurityExpressionHandler<T>	Base implementation of the facade which isolates Spring Security's requirements for evaluating security expressions from the implementation of the underlying expression objects.
AbstractSecurityInterceptor	Abstract class that implements security interception for secure objects.
AbstractSecurityWebApplicationInitializer	Registers the DelegatingFilterProxy to use the springSecurityFilterChain before any other registered Filter.
AbstractSecurityWebSocketMessageBrokerConfigurer	Deprecated. Use EnableWebSocketSecurity instead
AbstractServerWebExchangeMatcherRegistry<T>
AbstractSessionEvent	Abstract superclass for all session related events.
AbstractSessionFixationProtectionStrategy	A base class for performing session fixation protection.
AbstractSessionFixationProtectionStrategy.NullEventPublisher
AbstractUserDetailsAuthenticationProvider	A base AuthenticationProvider that allows subclasses to override and work with UserDetails objects.
AbstractUserDetailsReactiveAuthenticationManager	A base ReactiveAuthenticationManager that allows subclasses to override and work with UserDetails objects.
AbstractUserDetailsServiceBeanDefinitionParser
AbstractWebClientReactiveOAuth2AccessTokenResponseClient<T extends AbstractOAuth2AuthorizationGrantRequest>	Abstract base class for all of the WebClientReactive*TokenResponseClients that communicate to the Authorization Server's Token Endpoint.
AccessControlEntry	Represents an individual permission assignment within an Acl.
AccessControlEntryImpl	An immutable default implementation of AccessControlEntry.
AccessControlListTag	An implementation of Tag that allows its body through if all authorizations are granted to the request's principal.
AccessDecisionManager	Makes a final access control (authorization) decision.
AccessDecisionVoter<S>	Indicates a class is responsible for voting on authorization decisions.
AccessDeniedException	Thrown if an Authentication object does not hold a required authority.
AccessDeniedHandler	Used by ExceptionTranslationFilter to handle an AccessDeniedException.
AccessDeniedHandlerImpl	Base implementation of AccessDeniedHandler.
AccountExpiredException	Thrown if an authentication request is rejected because the account has expired.
AccountStatusException	Base class for authentication exceptions which are caused by a particular user account status (locked, disabled etc).
AccountStatusUserDetailsChecker
Acl	Represents an access control list (ACL) for a domain object.
AclAuthorizationStrategy	Strategy used by AclImpl to determine whether a principal is permitted to call adminstrative methods on the AclImpl.
AclAuthorizationStrategyImpl	Default implementation of AclAuthorizationStrategy.
AclCache	A caching layer for JdbcAclService.
AclDataAccessException	Abstract base class for Acl data operations.
AclEntryAfterInvocationCollectionFilteringProvider	Given a Collection of domain object instances returned from a secure object invocation, remove any Collection elements the principal does not have appropriate permission to access as defined by the AclService.
AclEntryAfterInvocationProvider	Given a domain object instance returned from a secure object invocation, ensures the principal has appropriate permission as defined by the AclService.
AclEntryVoter	Given a domain object instance passed as a method argument, ensures the principal has appropriate permission as indicated by the AclService.
AclFormattingUtils	Utility methods for displaying ACL information.
AclImpl	Base implementation of Acl.
AclPermissionCacheOptimizer	Batch loads ACLs for collections of objects to allow optimised filtering.
AclPermissionEvaluator	Used by Spring Security's expression-based access control implementation to evaluate permissions for a particular object using the ACL module.
AclService	Provides retrieval of Acl instances.
ActiveDirectoryAuthenticationException	Thrown as a translation of an AuthenticationException when attempting to authenticate against Active Directory using ActiveDirectoryLdapAuthenticationProvider.
ActiveDirectoryLdapAuthenticationProvider	Specialized LDAP authentication provider which uses Active Directory configuration conventions.
AddressStandardClaim	The Address Claim represents a physical mailing address defined by the OpenID Connect Core 1.0 specification that can be returned either in the UserInfo Response or the ID Token.
AesBytesEncryptor	Encryptor that uses AES encryption.
AesBytesEncryptor.CipherAlgorithm
AffirmativeBased	Simple concrete implementation of AccessDecisionManager that grants access if any AccessDecisionVoter returns an affirmative response.
AfterInvocationManager	Reviews the Object returned from a secure object invocation, being able to modify the Object or throw an AccessDeniedException.
AfterInvocationProvider	Indicates a class is responsible for participating in an AfterInvocationProviderManager decision.
AfterInvocationProviderManager	Provider-based implementation of AfterInvocationManager.
AllowFromStrategy	Deprecated. ALLOW-FROM is an obsolete directive that no longer works in modern browsers.
AlreadyBuiltException	Thrown when AbstractSecurityBuilder.build() is two or more times.
AlreadyExistsException	Thrown if an Acl entry already exists for the object.
AndMessageMatcher<T>	MessageMatcher that will return true if all of the passed in MessageMatcher instances match.
AndRequestMatcher	RequestMatcher that will return true if all of the passed in RequestMatcher instances match.
AndServerWebExchangeMatcher	Matches if all the provided ServerWebExchangeMatcher match
AnnotationMetadataExtractor<A extends java.lang.annotation.Annotation>	Strategy to process a custom security annotation to extract the relevant ConfigAttributes for securing a method.
AnnotationParameterNameDiscoverer	Allows finding parameter names using the value attribute of any number of Annotation instances.
AnonymousAuthenticationFilter	Detects if there is no Authentication object in the SecurityContextHolder, and populates it with one if needed.
AnonymousAuthenticationProvider	An AuthenticationProvider implementation that validates AnonymousAuthenticationTokens.
AnonymousAuthenticationToken	Represents an anonymous Authentication.
AnonymousAuthenticationWebFilter	Detects if there is no Authentication object in the ReactiveSecurityContextHolder, and populates it with one if needed.
AnonymousConfigurer<H extends HttpSecurityBuilder<H>>	Configures Anonymous authentication (i.e.
AnonymousPayloadInterceptor	If ReactiveSecurityContextHolder is empty populates an AnonymousAuthenticationToken
AntPathRequestMatcher	Matcher which compares a pre-defined ant-style pattern against the URL ( servletPath + pathInfo) of an HttpServletRequest.
AnyRequestMatcher	Matches any supplied request.
ApacheDSContainer	Deprecated. Use UnboundIdContainer instead because ApacheDS 1.x is no longer supported with no GA version to replace it.
Argon2PasswordEncoder	Implementation of PasswordEncoder that uses the Argon2 hashing function.
AspectJCallback	Called by the AspectJMethodSecurityInterceptor when it wishes for the AspectJ processing to continue.
AspectJMethodSecurityInterceptor	AspectJ JoinPoint security interceptor which wraps the JoinPoint in a MethodInvocation adapter to make it compatible with security infrastructure classes which only support MethodInvocations.
Attributes2GrantedAuthoritiesMapper	Interface to be implemented by classes that can map a list of security attributes (such as roles or group names) to a collection of Spring Security GrantedAuthoritys.
AuditableAccessControlEntry	Represents an ACE that provides auditing information.
AuditableAcl	A mutable ACL that provides audit capabilities.
AuditLogger	Used by AclImpl to log audit events.
AuthenticatedAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authenticated.
AuthenticatedPrincipal	Representation of an authenticated Principal once an Authentication request has been successfully authenticated by the AuthenticationManager.authenticate(Authentication) method.
AuthenticatedPrincipalOAuth2AuthorizedClientRepository	An implementation of an OAuth2AuthorizedClientRepository that delegates to the provided OAuth2AuthorizedClientService if the current Principal is authenticated, otherwise, to the default (or provided) OAuth2AuthorizedClientRepository if the current request is unauthenticated (or anonymous).
AuthenticatedPrincipalServerOAuth2AuthorizedClientRepository	An implementation of an ServerOAuth2AuthorizedClientRepository that delegates to the provided ServerOAuth2AuthorizedClientRepository if the current Principal is authenticated, otherwise, to the default (or provided) ServerOAuth2AuthorizedClientRepository if the current request is unauthenticated (or anonymous).
AuthenticatedReactiveAuthorizationManager<T>	A ReactiveAuthorizationManager that determines if the current user is authenticated.
AuthenticatedVoter	Votes if a ConfigAttribute.getAttribute() of IS_AUTHENTICATED_FULLY or IS_AUTHENTICATED_REMEMBERED or IS_AUTHENTICATED_ANONYMOUSLY is present.
Authentication	Represents the token for an authentication request or for an authenticated principal once the request has been processed by the AuthenticationManager.authenticate(Authentication) method.
AuthenticationCancelledException	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
AuthenticationConfiguration	Exports the authentication Configuration
AuthenticationConverter	A strategy used for converting from a HttpServletRequest to an Authentication of particular type.
AuthenticationConverterServerWebExchangeMatcher	Matches if the ServerAuthenticationConverter can convert a ServerWebExchange to an Authentication.
AuthenticationCredentialsNotFoundEvent	Indicates a secure object invocation failed because the Authentication could not be obtained from the SecurityContextHolder.
AuthenticationCredentialsNotFoundException	Thrown if an authentication request is rejected because there is no Authentication object in the SecurityContext.
AuthenticationDetailsSource<C,T>	Provides a Authentication.getDetails() object for a given web request.
AuthenticationEntryPoint	Used by ExceptionTranslationFilter to commence an authentication scheme.
AuthenticationEntryPointFailureHandler	Adapts a AuthenticationEntryPoint into a AuthenticationFailureHandler
AuthenticationEventPublisher
AuthenticationException	Abstract superclass for all exceptions related to an Authentication object being invalid for whatever reason.
AuthenticationFailureBadCredentialsEvent	Application event which indicates authentication failure due to invalid credentials being presented.
AuthenticationFailureCredentialsExpiredEvent	Application event which indicates authentication failure due to the user's credentials having expired.
AuthenticationFailureDisabledEvent	Application event which indicates authentication failure due to the user's account being disabled.
AuthenticationFailureExpiredEvent	Application event which indicates authentication failure due to the user's account having expired.
AuthenticationFailureHandler	Strategy used to handle a failed authentication attempt.
AuthenticationFailureLockedEvent	Application event which indicates authentication failure due to the user's account having been locked.
AuthenticationFailureProviderNotFoundEvent	Application event which indicates authentication failure due to there being no registered AuthenticationProvider that can process the request.
AuthenticationFailureProxyUntrustedEvent	Application event which indicates authentication failure due to the CAS user's ticket being generated by an untrusted proxy.
AuthenticationFailureServiceExceptionEvent	Application event which indicates authentication failure due to there being a problem internal to the AuthenticationManager.
AuthenticationFilter	A Filter that performs authentication of a particular request.
AuthenticationManager	Processes an Authentication request.
AuthenticationManagerBeanDefinitionParser	Registers the central ProviderManager used by the namespace configuration, and allows the configuration of an alias, allowing users to reference it in their beans and clearly see where the name is coming from.
AuthenticationManagerBeanDefinitionParser.NullAuthenticationProvider	Provider which doesn't provide any service.
AuthenticationManagerBuilder	SecurityBuilder used to create an AuthenticationManager.
AuthenticationManagerFactoryBean	Factory bean for the namespace AuthenticationManager, which allows a more meaningful error message to be reported in the NoSuchBeanDefinitionException, if the user has forgotten to declare the <authentication-manager> element.
AuthenticationManagerResolver<C>	An interface for resolving an AuthenticationManager based on the provided context
AuthenticationMethod	The authentication method used when sending bearer access tokens in resource requests to resource servers.
AuthenticationPayloadExchangeConverter	Converts from the PayloadExchange for Authentication Extension.
AuthenticationPayloadInterceptor	Uses the provided ReactiveAuthenticationManager to authenticate a Payload.
AuthenticationPrincipal	Annotation that is used to resolve Authentication.getPrincipal() to a method argument.
AuthenticationPrincipal	Deprecated. Use AuthenticationPrincipal instead.
AuthenticationPrincipalArgumentResolver	Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.
AuthenticationPrincipalArgumentResolver	Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.
AuthenticationPrincipalArgumentResolver	Deprecated. Use AuthenticationPrincipalArgumentResolver instead.
AuthenticationPrincipalArgumentResolver	Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.
AuthenticationPrincipalArgumentResolver	Resolves the Authentication
AuthenticationProvider	Indicates a class can process a specific Authentication implementation.
AuthenticationProviderBeanDefinitionParser	Wraps a UserDetailsService bean with a DaoAuthenticationProvider and registers the latter with the ProviderManager.
AuthenticationServiceException	Thrown if an authentication request could not be processed due to a system problem.
AuthenticationSimpleHttpInvokerRequestExecutor	Deprecated. as of 5.6.0 with no replacement
AuthenticationSuccessEvent	Application event which indicates successful authentication.
AuthenticationSuccessHandler	Strategy used to handle a successful user authentication.
AuthenticationSwitchUserEvent	Application event which indicates that a user context switch.
AuthenticationTag	An Tag implementation that allows convenient access to the current Authentication object.
AuthenticationTrustResolver	Evaluates Authentication tokens
AuthenticationTrustResolverImpl	Basic implementation of AuthenticationTrustResolver.
AuthenticationUserDetailsService<T extends Authentication>	Interface that allows for retrieving a UserDetails object based on an Authentication object.
AuthenticationWebFilter	A WebFilter that performs authentication of a particular request.
AuthorityAuthorizationDecision	Represents an AuthorizationDecision based on a collection of authorities
AuthorityAuthorizationManager<T>	An AuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains a specified authority.
AuthorityGranter	The AuthorityGranter interface is used to map a given principal to role names.
AuthorityReactiveAuthorizationManager<T>	A ReactiveAuthorizationManager that determines if the current user is authorized by evaluating if the Authentication contains a specified authority.
AuthorityUtils	Utility method for manipulating GrantedAuthority collections etc.
AuthorizationChannelInterceptor	Authorizes Message resources using the provided AuthorizationManager
AuthorizationCodeOAuth2AuthorizedClientProvider	An implementation of an OAuth2AuthorizedClientProvider for the authorization_code grant.
AuthorizationCodeReactiveOAuth2AuthorizedClientProvider	An implementation of a ReactiveOAuth2AuthorizedClientProvider for the authorization_code grant.
AuthorizationContext
AuthorizationDecision
AuthorizationDeniedEvent<T>	An ApplicationEvent which indicates failed authorization.
AuthorizationEventPublisher	A contract for publishing authorization events
AuthorizationFailureEvent	Indicates a secure object invocation failed because the principal could not be authorized for the request.
AuthorizationFilter	An authorization filter that restricts access to the URL using AuthorizationManager.
AuthorizationGrantedEvent<T>	An ApplicationEvent which indicates successful authorization.
AuthorizationGrantType	An authorization grant is a credential representing the resource owner's authorization (to access it's protected resources) to the client and used by the client to obtain an access token.
AuthorizationInterceptorsOrder	Ordering of Spring Security's authorization Advisors
AuthorizationManager<T>	An Authorization manager which can determine if an Authentication has access to a specific object.
AuthorizationManagerAfterMethodInterceptor	A MethodInterceptor which can determine if an Authentication has access to the result of an MethodInvocation using an AuthorizationManager
AuthorizationManagerBeforeMethodInterceptor	A MethodInterceptor which uses a AuthorizationManager to determine if an Authentication may invoke the given MethodInvocation
AuthorizationManagerWebInvocationPrivilegeEvaluator	An implementation of WebInvocationPrivilegeEvaluator which delegates the checks to an instance of AuthorizationManager
AuthorizationPayloadInterceptor	Provides authorization of the PayloadExchange.
AuthorizationRequestRepository<T extends OAuth2AuthorizationRequest>	Implementations of this interface are responsible for the persistence of OAuth2AuthorizationRequest between requests.
AuthorizationServiceException	Thrown if an authorization request could not be processed due to a system problem.
AuthorizationWebFilter
AuthorizedClientServiceOAuth2AuthorizedClientManager	An implementation of an OAuth2AuthorizedClientManager that is capable of operating outside of the context of a HttpServletRequest, e.g.
AuthorizedClientServiceOAuth2AuthorizedClientManager.DefaultContextAttributesMapper	The default implementation of the contextAttributesMapper.
AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager	An implementation of a ReactiveOAuth2AuthorizedClientManager that is capable of operating outside of the context of a ServerWebExchange, e.g.
AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager.DefaultContextAttributesMapper	The default implementation of the contextAttributesMapper.
AuthorizedEvent	Event indicating a secure object was invoked successfully.
AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>	Adds a URL based authorization using AuthorizationManager.
AutowiredWebSecurityConfigurersIgnoreParents	A class used to get all the WebSecurityConfigurer instances from the current ApplicationContext but ignoring the parent.
AxFetchListFactory	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
BadCredentialsException	Thrown if an authentication request is rejected because the credentials are invalid.
BadJwtException	An exception similar to BadCredentialsException that indicates a Jwt that is invalid in some way.
BadOpaqueTokenException	An exception similar to BadCredentialsException that indicates an opaque token that is invalid in some way.
Base64	Deprecated. Use java.util.Base64
Base64StringKeyGenerator	A StringKeyGenerator that generates base64-encoded String keys.
BasePermission	A set of standard permissions.
BasicAuthenticationConverter	Converts from a HttpServletRequest to UsernamePasswordAuthenticationToken that can be authenticated.
BasicAuthenticationDecoder	Deprecated. Basic Authentication did not evolve into a standard.
BasicAuthenticationEncoder	Deprecated. Basic Authentication did not evolve into a standard.
BasicAuthenticationEntryPoint	Used by the ExceptionTranslationFilter to commence authentication via the BasicAuthenticationFilter.
BasicAuthenticationFilter	Processes a HTTP request's BASIC authorization headers, putting the result into the SecurityContextHolder.
BasicAuthenticationPayloadExchangeConverter	Converts from the PayloadExchange to a UsernamePasswordAuthenticationToken by extracting UsernamePasswordMetadata.BASIC_AUTHENTICATION_MIME_TYPE from the metadata.
BasicLookupStrategy	Performs lookups in a manner that is compatible with ANSI SQL.
BCrypt	BCrypt implements OpenBSD-style Blowfish password hashing using the scheme described in "A Future-Adaptable Password Scheme" by Niels Provos and David Mazieres.
BCryptPasswordEncoder	Implementation of PasswordEncoder that uses the BCrypt strong hashing function.
BCryptPasswordEncoder.BCryptVersion	Stores the default bcrypt version for use in configuration.
BeanIds	Contains globally used default Bean IDs for beans created by the namespace support in Spring Security 2.
BearerPayloadExchangeConverter	Converts from the PayloadExchange to a BearerTokenAuthenticationToken by extracting BearerTokenMetadata.BEARER_AUTHENTICATION_MIME_TYPE from the metadata.
BearerTokenAccessDeniedHandler	Translates any AccessDeniedException into an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate.
BearerTokenAuthentication	An Authentication token that represents a successful authentication as obtained through a bearer token.
BearerTokenAuthenticationEncoder	Encodes Bearer Authentication.
BearerTokenAuthenticationEntryPoint	An AuthenticationEntryPoint implementation used to commence authentication of protected resource requests using BearerTokenAuthenticationFilter.
BearerTokenAuthenticationFilter	Authenticates requests that contain an OAuth 2.0 Bearer Token.
BearerTokenAuthenticationToken	An Authentication that contains a Bearer Token.
BearerTokenError	A representation of a Bearer Token Error.
BearerTokenErrorCodes	Standard error codes defined by the OAuth 2.0 Authorization Framework: Bearer Token Usage.
BearerTokenErrors	A factory for creating BearerTokenError instances that correspond to the registered Bearer Token Error Codes.
BearerTokenMetadata	Represents a bearer token that has been encoded into a Payload#metadata().
BearerTokenResolver	A strategy for resolving Bearer Tokens from the HttpServletRequest.
BearerTokenServerAccessDeniedHandler	Translates any AccessDeniedException into an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate.
BearerTokenServerAuthenticationEntryPoint	An AuthenticationEntryPoint implementation used to commence authentication of protected resource requests using BearerTokenAuthenticationFilter.
BindAuthenticator	An authenticator which binds as a user.
BouncyCastleAesCbcBytesEncryptor	An Encryptor equivalent to AesBytesEncryptor using AesBytesEncryptor.CipherAlgorithm.CBC that uses Bouncy Castle instead of JCE.
BouncyCastleAesGcmBytesEncryptor	An Encryptor equivalent to AesBytesEncryptor using AesBytesEncryptor.CipherAlgorithm.GCM that uses Bouncy Castle instead of JCE.
BytesEncryptor	Service interface for symmetric data encryption.
BytesKeyGenerator	A generator for unique byte array-based keys.
CacheControlHeadersWriter	Inserts headers to prevent caching if no cache control headers have been specified.
CacheControlServerHttpHeadersWriter	Writes cache control related headers.
CachingUserDetailsService
CasAssertionAuthenticationToken	Temporary authentication object needed to load the user details service.
CasAuthenticationEntryPoint	Used by the ExceptionTranslationFilter to commence authentication via the JA-SIG Central Authentication Service (CAS).
CasAuthenticationFilter	Processes a CAS service ticket, obtains proxy granting tickets, and processes proxy tickets.
CasAuthenticationProvider	An AuthenticationProvider implementation that integrates with JA-SIG Central Authentication Service (CAS).
CasAuthenticationToken	Represents a successful CAS Authentication.
CasJackson2Module	Jackson module for spring-security-cas.
ChangeSessionIdAuthenticationStrategy	Uses HttpServletRequest.changeSessionId() to protect against session fixation attacks.
ChannelAttributeFactory	Used as a factory bean to create config attribute values for the requires-channel attribute.
ChannelDecisionManager	Decides whether a web channel provides sufficient security.
ChannelDecisionManagerImpl	Implementation of ChannelDecisionManager.
ChannelEntryPoint	May be used by a ChannelProcessor to launch a web channel.
ChannelProcessingFilter	Ensures a web request is delivered over the required channel.
ChannelProcessor	Decides whether a web channel meets a specific security condition.
ChannelSecurityConfigurer<H extends HttpSecurityBuilder<H>>	Adds channel security (i.e.
ChannelSecurityInterceptor	Deprecated. Use AuthorizationChannelInterceptor instead
ChildrenExistException	Thrown if an Acl cannot be deleted because children Acls exist.
ClaimAccessor	An "accessor" for a set of claims that may be used for assertions.
ClaimConversionService	A ConversionService configured with converters that provide type conversion for claim values.
ClaimTypeConverter	A Converter that provides type conversion for claim values.
ClearSiteDataHeaderWriter	Provides support for Clear Site Data.
ClearSiteDataHeaderWriter.Directive	Represents the directive values expected by the ClearSiteDataHeaderWriter.
ClearSiteDataServerHttpHeadersWriter	Writes the Clear-Site-Data response header when the request is secure.
ClearSiteDataServerHttpHeadersWriter.Directive	Represents the directive values expected by the ClearSiteDataServerHttpHeadersWriter
ClientAuthenticationMethod	The authentication method used when authenticating the client with the authorization server.
ClientAuthorizationException	This exception is thrown on the client side when an attempt to authenticate or authorize an OAuth 2.0 client fails.
ClientAuthorizationRequiredException	This exception is thrown when an OAuth 2.0 Client is required to obtain authorization from the Resource Owner.
ClientCredentialsOAuth2AuthorizedClientProvider	An implementation of an OAuth2AuthorizedClientProvider for the client_credentials grant.
ClientCredentialsReactiveOAuth2AuthorizedClientProvider	An implementation of a ReactiveOAuth2AuthorizedClientProvider for the client_credentials grant.
ClientRegistration	A representation of a client registration with an OAuth 2.0 or OpenID Connect 1.0 Provider.
ClientRegistration.Builder	A builder for ClientRegistration.
ClientRegistrationRepository	A repository for OAuth 2.0 / OpenID Connect 1.0 ClientRegistration(s).
ClientRegistrations	Allows creating a ClientRegistration.Builder from an OpenID Provider Configuration or Authorization Server Metadata based on provided issuer.
ClientRegistrationsBeanDefinitionParser
CommonOAuth2Provider	Common OAuth2 Providers that can be used to create builders pre-configured with sensible defaults.
CompositeHeaderWriter	A HeaderWriter that delegates to several other HeaderWriters.
CompositeLogoutHandler	Performs a logout through all the LogoutHandler implementations.
CompositeRequestRejectedHandler	A RequestRejectedHandler that delegates to several other RequestRejectedHandlers.
CompositeServerHttpHeadersWriter	Combines multiple ServerHttpHeadersWriter instances into a single instance.
CompositeSessionAuthenticationStrategy	A SessionAuthenticationStrategy that accepts multiple SessionAuthenticationStrategy implementations to delegate to.
ConcurrentSessionControlAuthenticationStrategy	Strategy which handles concurrent session-control.
ConcurrentSessionFilter	Filter required by concurrent session handling package.
ConfigAttribute	Stores a security system related configuration attribute.
ConsensusBased	Simple concrete implementation of AccessDecisionManager that uses a consensus-based approach.
ConsoleAuditLogger	A basic implementation of AuditLogger.
ContentSecurityPolicyHeaderWriter	Provides support for Content Security Policy (CSP) Level 2.
ContentSecurityPolicyServerHttpHeadersWriter	Writes the Contet-Security-Policy response header with configured policy directives.
ContentTypeOptionsServerHttpHeadersWriter	Adds X-Content-Type-Options: nosniff
ContextPropagatingRemoteInvocation	Deprecated. as of 5.6.0 with no replacement
ContextPropagatingRemoteInvocationFactory	Deprecated. as of 5.6.0 with no replacement
ContextSourceSettingPostProcessor	Checks for the presence of a ContextSource instance.
CookieClearingLogoutHandler	A logout handler which clears either - A defined list of cookie names, using the context path as the cookie path OR - A given list of Cookies
CookieCsrfTokenRepository	A CsrfTokenRepository that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.
CookieRequestCache	An Implementation of RequestCache which saves the original request URI in a cookie.
CookieServerCsrfTokenRepository	A ServerCsrfTokenRepository that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.
CookieServerRequestCache	An implementation of ServerRequestCache that saves the requested URI in a cookie.
CookieTheftException
CoreJackson2Module	Jackson module for spring-security-core.
CorsBeanDefinitionParser	Parser for the CorsFilter.
CorsConfigurer<H extends HttpSecurityBuilder<H>>	Adds CorsFilter to the Spring Security filter chain.
CredentialsContainer	Indicates that the implementing object contains sensitive data, which can be erased using the eraseCredentials method.
CredentialsExpiredException	Thrown if an authentication request is rejected because the account's credentials have expired.
CrossOriginEmbedderPolicyHeaderWriter	Inserts Cross-Origin-Embedder-Policy header.
CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
CrossOriginEmbedderPolicyServerHttpHeadersWriter	Inserts Cross-Origin-Embedder-Policy headers.
CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
CrossOriginOpenerPolicyHeaderWriter	Inserts the Cross-Origin-Opener-Policy header
CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
CrossOriginOpenerPolicyServerHttpHeadersWriter	Inserts Cross-Origin-Opener-Policy header.
CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
CrossOriginResourcePolicyHeaderWriter	Inserts Cross-Origin-Resource-Policy header
CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
CrossOriginResourcePolicyServerHttpHeadersWriter	Inserts Cross-Origin-Resource-Policy headers.
CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
CsrfAuthenticationStrategy	CsrfAuthenticationStrategy is in charge of removing the CsrfToken upon authenticating.
CsrfBeanDefinitionParser	Parser for the CsrfFilter.
CsrfChannelInterceptor	ChannelInterceptorAdapter that validates that a valid CSRF is included in the header of any SimpMessageType.CONNECT message.
CsrfConfigurer<H extends HttpSecurityBuilder<H>>	Adds CSRF protection for the methods as specified by CsrfConfigurer.requireCsrfProtectionMatcher(RequestMatcher).
CsrfException	Thrown when an invalid or missing CsrfToken is found in the HttpServletRequest
CsrfException	Thrown when an invalid or missing CsrfToken is found in the HttpServletRequest
CsrfFilter	Applies CSRF protection using a synchronizer token pattern.
CsrfInputTag	A JSP tag that prints out a hidden form field for the CSRF token.
CsrfLogoutHandler	CsrfLogoutHandler is in charge of removing the CsrfToken upon logout.
CsrfMetaTagsTag	A JSP tag that prints out a meta tags holding the CSRF form field name and token value for use in JavaScrip code.
CsrfRequestDataValueProcessor
CsrfRequestDataValueProcessor	Integration with Spring Web MVC that automatically adds the CsrfToken into forms with hidden inputs when using Spring tag libraries.
CsrfServerLogoutHandler	CsrfServerLogoutHandler is in charge of removing the CsrfToken upon logout.
CsrfToken	Provides the information about an expected CSRF token.
CsrfToken
CsrfTokenArgumentResolver	Allows resolving the current CsrfToken.
CsrfTokenHandshakeInterceptor	Copies a CsrfToken from the HttpServletRequest's attributes to the WebSocket attributes.
CsrfTokenRepository	An API to allow changing the method in which the expected CsrfToken is associated to the HttpServletRequest.
CsrfWebFilter	Applies CSRF protection using a synchronizer token pattern.
CumulativePermission	Represents a Permission that is constructed at runtime from other permissions.
CurrentSecurityContext	Annotation that is used to resolve the SecurityContext as a method argument.
CurrentSecurityContextArgumentResolver	Allows resolving the Authentication.getPrincipal() using the CurrentSecurityContext annotation.
CurrentSecurityContextArgumentResolver	Allows resolving the SecurityContext using the CurrentSecurityContext annotation.
CurrentSecurityContextArgumentResolver	Resolves the SecurityContext
Customizer<T>	Callback interface that accepts a single input argument and returns no result.
CustomUserTypesOAuth2UserService	Deprecated. It is recommended to use a delegation-based strategy of an OAuth2UserService to support custom OAuth2User types, as it provides much greater flexibility compared to this implementation.
CycleInRoleHierarchyException	Exception that is thrown because of a cycle in the role hierarchy definition
DaoAuthenticationConfigurer<B extends ProviderManagerBuilder<B>,U extends UserDetailsService>	Allows configuring a DaoAuthenticationProvider
DaoAuthenticationProvider	An AuthenticationProvider implementation that retrieves user details from a UserDetailsService.
DebugBeanDefinitionParser
DebugFilter	Spring Security debugging filter.
DefaultAddressStandardClaim	The default implementation of an Address Claim.
DefaultAddressStandardClaim.Builder	A builder for DefaultAddressStandardClaim.
DefaultAuthenticationEventPublisher	The default strategy for publishing authentication events.
DefaultAuthorizationCodeTokenResponseClient	The default implementation of an OAuth2AccessTokenResponseClient for the authorization_code grant.
DefaultBearerTokenResolver	The default BearerTokenResolver implementation based on RFC 6750.
DefaultClientCredentialsTokenResponseClient	The default implementation of an OAuth2AccessTokenResponseClient for the client_credentials grant.
DefaultCsrfToken	A CSRF token that is used to protect against CSRF attacks.
DefaultCsrfToken	A CSRF token that is used to protect against CSRF attacks.
DefaultFilterChainValidator
DefaultFilterInvocationSecurityMetadataSource	Default implementation of FilterInvocationDefinitionSource.
DefaultHttpFirewall	User's should consider using StrictHttpFirewall because rather than trying to sanitize a malicious URL it rejects the malicious URL providing better security guarantees.
DefaultHttpSecurityExpressionHandler	A SecurityExpressionHandler that uses a RequestAuthorizationContext to create a WebSecurityExpressionRoot.
DefaultJaasAuthenticationProvider	Creates a LoginContext using the Configuration provided to it.
DefaultJwtBearerTokenResponseClient	The default implementation of an OAuth2AccessTokenResponseClient for the jwt-bearer grant.
DefaultLdapAuthoritiesPopulator	The default strategy for obtaining user role information from the directory.
DefaultLdapUsernameToDnMapper	This implementation appends a name component to the userDnBase context using the usernameAttributeName property.
DefaultLoginExceptionResolver	This LoginExceptionResolver simply wraps the LoginException with an AuthenticationServiceException.
DefaultLoginPageConfigurer<H extends HttpSecurityBuilder<H>>	Adds a Filter that will generate a login page if one is not specified otherwise when using EnableWebSecurity.
DefaultLoginPageGeneratingFilter	For internal use with namespace configuration in the case where a user doesn't configure a login page.
DefaultLogoutPageGeneratingFilter	Generates a default log out page.
DefaultMapOAuth2AccessTokenResponseConverter	A Converter that converts the provided OAuth 2.0 Access Token Response parameters to an OAuth2AccessTokenResponse.
DefaultMessageSecurityExpressionHandler<T>	The default implementation of SecurityExpressionHandler which uses a MessageSecurityExpressionRoot.
DefaultMessageSecurityMetadataSource	Deprecated. Use MessageMatcherDelegatingAuthorizationManager instead
DefaultMethodSecurityExpressionHandler	The standard implementation of MethodSecurityExpressionHandler.
DefaultOAuth2AccessTokenResponseMapConverter	A Converter that converts the provided OAuth2AccessTokenResponse to a Map representation of the OAuth 2.0 Access Token Response parameters.
DefaultOAuth2AuthenticatedPrincipal	A domain object that wraps the attributes of an OAuth 2.0 token.
DefaultOAuth2AuthorizationRequestResolver	An implementation of an OAuth2AuthorizationRequestResolver that attempts to resolve an OAuth2AuthorizationRequest from the provided HttpServletRequest using the default request URI pattern /oauth2/authorization/{registrationId}.
DefaultOAuth2AuthorizedClientManager	The default implementation of an OAuth2AuthorizedClientManager for use within the context of a HttpServletRequest.
DefaultOAuth2AuthorizedClientManager.DefaultContextAttributesMapper	The default implementation of the contextAttributesMapper.
DefaultOAuth2User	The default implementation of an OAuth2User.
DefaultOAuth2UserService	An implementation of an OAuth2UserService that supports standard OAuth 2.0 Provider's.
DefaultOidcUser	The default implementation of an OidcUser.
DefaultPasswordTokenResponseClient	Deprecated. The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.
DefaultPayloadExchange	Default implementation of PayloadExchange
DefaultPermissionFactory	Default implementation of PermissionFactory.
DefaultPermissionGrantingStrategy
DefaultReactiveOAuth2AuthorizedClientManager	The default implementation of a ReactiveOAuth2AuthorizedClientManager for use within the context of a ServerWebExchange.
DefaultReactiveOAuth2AuthorizedClientManager.DefaultContextAttributesMapper	The default implementation of the contextAttributesMapper.
DefaultReactiveOAuth2UserService	An implementation of an ReactiveOAuth2UserService that supports standard OAuth 2.0 Provider's.
DefaultRedirectStrategy	Simple implementation of RedirectStrategy which is the default used throughout the framework.
DefaultRefreshTokenTokenResponseClient	The default implementation of an OAuth2AccessTokenResponseClient for the refresh_token grant.
DefaultRelyingPartyRegistrationResolver	A Converter that resolves a RelyingPartyRegistration by extracting the registration id from the request, querying a RelyingPartyRegistrationRepository, and resolving any template values.
DefaultRequestRejectedHandler	Default implementation of RequestRejectedHandler that simply rethrows the exception.
DefaultSaml2AuthenticatedPrincipal	Default implementation of a Saml2AuthenticatedPrincipal.
DefaultSaml2AuthenticationRequestContextResolver	Deprecated. Use Saml2AuthenticationRequestResolver instead
DefaultSavedRequest	Represents central information from a HttpServletRequest.
DefaultSavedRequest.Builder
DefaultSecurityFilterChain	Standard implementation of SecurityFilterChain.
DefaultSecurityParameterNameDiscoverer	Spring Security's default ParameterNameDiscoverer which tries a number of ParameterNameDiscoverer depending on what is found on the classpath.
DefaultServerOAuth2AuthorizationRequestResolver	The default implementation of ServerOAuth2AuthorizationRequestResolver.
DefaultServerRedirectStrategy	The default ServerRedirectStrategy to use.
DefaultSpringSecurityContextSource	ContextSource implementation which uses Spring LDAP's LdapContextSource as a base class.
DefaultToken	The default implementation of Token.
DefaultWebInvocationPrivilegeEvaluator	Allows users to determine whether they have privileges for a given web URI.
DefaultWebSecurityExpressionHandler
DelegatingAccessDeniedHandler	An AccessDeniedHandler that delegates to other AccessDeniedHandler instances based upon the type of AccessDeniedException passed into DelegatingAccessDeniedHandler.handle(HttpServletRequest, HttpServletResponse, AccessDeniedException).
DelegatingApplicationListener	Used for delegating to a number of SmartApplicationListener instances.
DelegatingAuthenticationEntryPoint	An AuthenticationEntryPoint which selects a concrete AuthenticationEntryPoint based on a RequestMatcher evaluation.
DelegatingAuthenticationFailureHandler	An AuthenticationFailureHandler that delegates to other AuthenticationFailureHandler instances based upon the type of AuthenticationException passed into DelegatingAuthenticationFailureHandler.onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) .
DelegatingJwtGrantedAuthoritiesConverter	A Jwt to GrantedAuthority Converter that is a composite of converters.
DelegatingLogoutSuccessHandler	Delegates to logout handlers based on matched request matchers
DelegatingMethodSecurityMetadataSource	Automatically tries a series of method definition sources, relying on the first source of metadata that provides a non-null/non-empty response.
DelegatingOAuth2AuthorizedClientProvider	An implementation of an OAuth2AuthorizedClientProvider that simply delegates to it's internal List of OAuth2AuthorizedClientProvider(s).
DelegatingOAuth2TokenValidator<T extends AbstractOAuth2Token>	A composite validator
DelegatingOAuth2UserService<R extends OAuth2UserRequest,U extends OAuth2User>	An implementation of an OAuth2UserService that simply delegates to it's internal List of OAuth2UserService(s).
DelegatingPasswordEncoder	A password encoder that delegates to another PasswordEncoder based upon a prefixed identifier.
DelegatingReactiveAuthenticationManager	A ReactiveAuthenticationManager that delegates to other ReactiveAuthenticationManager instances using the result from the first non empty result.
DelegatingReactiveAuthorizationManager
DelegatingReactiveAuthorizationManager.Builder
DelegatingReactiveOAuth2AuthorizedClientProvider	An implementation of a ReactiveOAuth2AuthorizedClientProvider that simply delegates to it's internal List of ReactiveOAuth2AuthorizedClientProvider(s).
DelegatingRequestMatcherHeaderWriter	Delegates to the provided HeaderWriter when RequestMatcher.matches(HttpServletRequest) returns true.
DelegatingSecurityContextAsyncTaskExecutor	An AsyncTaskExecutor which wraps each Runnable in a DelegatingSecurityContextRunnable and each Callable in a DelegatingSecurityContextCallable.
DelegatingSecurityContextCallable<V>	Wraps a delegate Callable with logic for setting up a SecurityContext before invoking the delegate Callable and then removing the SecurityContext after the delegate has completed.
DelegatingSecurityContextExecutor	An Executor which wraps each Runnable in a DelegatingSecurityContextRunnable.
DelegatingSecurityContextExecutorService	An ExecutorService which wraps each Runnable in a DelegatingSecurityContextRunnable and each Callable in a DelegatingSecurityContextCallable.
DelegatingSecurityContextRunnable	Wraps a delegate Runnable with logic for setting up a SecurityContext before invoking the delegate Runnable and then removing the SecurityContext after the delegate has completed.
DelegatingSecurityContextScheduledExecutorService	An ScheduledExecutorService which wraps each Runnable in a DelegatingSecurityContextRunnable and each Callable in a DelegatingSecurityContextCallable.
DelegatingSecurityContextSchedulingTaskExecutor	An SchedulingTaskExecutor which wraps each Runnable in a DelegatingSecurityContextRunnable and each Callable in a DelegatingSecurityContextCallable.
DelegatingSecurityContextTaskExecutor	An TaskExecutor which wraps each Runnable in a DelegatingSecurityContextRunnable.
DelegatingSecurityContextTaskScheduler	An implementation of TaskScheduler invoking it whenever the trigger indicates a next execution time.
DelegatingServerAuthenticationEntryPoint	A ServerAuthenticationEntryPoint which delegates to multiple ServerAuthenticationEntryPoint based on a ServerWebExchangeMatcher
DelegatingServerAuthenticationEntryPoint.DelegateEntry
DelegatingServerAuthenticationSuccessHandler	Delegates to a collection of ServerAuthenticationSuccessHandler implementations.
DelegatingServerLogoutHandler	Delegates to a collection of ServerLogoutHandler implementations.
DenyAllPermissionEvaluator	A null PermissionEvaluator which denies all access.
DigestAuthenticationEntryPoint	Used by the SecurityEnforcementFilter to commence authentication via the DigestAuthenticationFilter.
DigestAuthenticationFilter	Processes a HTTP request's Digest authorization headers, putting the result into the SecurityContextHolder.
DisabledException	Thrown if an authentication request is rejected because the account is disabled.
DisableEncodeUrlFilter	Disables encoding URLs using the HttpServletResponse to prevent including the session id in URLs which is not considered URL because the session id can be leaked in things like HTTP access logs.
DispatcherTypeRequestMatcher	Checks the DispatcherType to decide whether to match a given request.
DnsEntryNotFoundException	Deprecated. as of 5.6.0 with no replacement
DnsLookupException	Deprecated. as of 5.6.0 with no replacement
DnsResolver	Deprecated. as of 5.6.0 with no replacement
EhCacheBasedAclCache	Deprecated. since 5.6.
EhCacheBasedTicketCache	Deprecated. since 5.6.
EhCacheBasedUserCache	Deprecated. since 5.6.
Elements	Contains all the element names used by Spring Security 3 namespace support.
ELRequestMatcher	A RequestMatcher implementation which uses a SpEL expression
EmbeddedLdapServerContainer	Provides lifecycle services for an embedded LDAP server.
EmbeddedLdapServerContextSourceFactoryBean	Creates a DefaultSpringSecurityContextSource used to perform LDAP authentication and starts and in-memory LDAP server.
EnableGlobalAuthentication	The EnableGlobalAuthentication annotation signals that the annotated class can be used to configure a global instance of AuthenticationManagerBuilder.
EnableGlobalMethodSecurity	Enables Spring Security global method security similar to the <global-method-security> xml support.
EnableMethodSecurity	Enables Spring Security Method Security.
EnableReactiveMethodSecurity
EnableRSocketSecurity	Add this annotation to a Configuration class to have Spring Security RSocketSecurity support added.
EnableWebFluxSecurity	Add this annotation to a Configuration class to have Spring Security WebFlux support added.
EnableWebMvcSecurity	Deprecated. Use EnableWebSecurity instead which will automatically add the Spring MVC related Security items.
EnableWebSecurity	Add this annotation to an @Configuration class to have the Spring Security configuration defined in any WebSecurityConfigurer or more likely by exposing a SecurityFilterChain bean:
EnableWebSocketSecurity	Allows configuring WebSocket Authorization.
EncodingUtils	Static helper for encoding data.
Encryptors	Factory for commonly used encryptors.
Enumerator<T>	Adapter that wraps an Enumeration around a Java 2 collection Iterator.
ExceptionHandlingConfigurer<H extends HttpSecurityBuilder<H>>	Adds exception handling for Spring Security related exceptions to an application.
ExceptionMappingAuthenticationFailureHandler	Uses the internal map of exceptions types to URLs to determine the destination on authentication failure.
ExceptionTranslationFilter	Handles any AccessDeniedException and AuthenticationException thrown within the filter chain.
ExceptionTranslationWebFilter
ExchangeMatcherRedirectWebFilter	Web filter that redirects requests that match ServerWebExchangeMatcher to the specified URL.
ExpressionAttributeAuthorizationDecision	Deprecated. Use ExpressionAuthorizationDecision instead
ExpressionAuthorizationDecision	Represents an AuthorizationDecision based on a Expression
ExpressionBasedAnnotationAttributeFactory	PrePostInvocationAttributeFactory which interprets the annotation value as an expression to be evaluated at runtime.
ExpressionBasedFilterInvocationSecurityMetadataSource	Expression-based FilterInvocationSecurityMetadataSource.
ExpressionBasedMessageSecurityMetadataSourceFactory	Deprecated. Use MessageMatcherDelegatingAuthorizationManager instead
ExpressionBasedPostInvocationAdvice
ExpressionBasedPreInvocationAdvice	Method pre-invocation handling based on expressions.
ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>	Adds URL based authorization based upon SpEL expressions to an application.
ExpressionUtils
FastHttpDateFormat	Utility class to generate HTTP dates.
FeaturePolicyHeaderWriter	Provides support for Feature Policy.
FeaturePolicyServerHttpHeadersWriter	Writes the Feature-Policy response header with configured policy directives.
FieldUtils	Offers static methods for directly manipulating fields.
FilterBasedLdapUserSearch	LdapUserSearch implementation which uses an Ldap filter to locate the user.
FilterChainBeanDefinitionParser
FilterChainMapBeanDefinitionDecorator	Sets the filter chain Map for a FilterChainProxy bean declaration.
FilterChainProxy	Delegates Filter requests to a list of Spring-managed filter beans.
FilterChainProxy.FilterChainValidator
FilterInvocation	Holds objects associated with a HTTP filter.
FilterInvocationSecurityMetadataSource	Marker interface for SecurityMetadataSource implementations that are designed to perform lookups keyed on FilterInvocations.
FilterInvocationSecurityMetadataSourceParser	Allows for convenient creation of a FilterInvocationSecurityMetadataSource bean for use with a FilterSecurityInterceptor.
FilterSecurityInterceptor	Performs security handling of HTTP resources via a filter implementation.
FirewalledRequest	Request wrapper which is returned by the HttpFirewall interface.
ForceEagerSessionCreationFilter	Eagerly creates HttpSession if it does not already exist.
FormLoginBeanDefinitionParser
FormLoginConfigurer<H extends HttpSecurityBuilder<H>>	Adds form based authentication.
ForwardAuthenticationFailureHandler	Forward Authentication Failure Handler
ForwardAuthenticationSuccessHandler	Forward Authentication Success Handler
ForwardLogoutSuccessHandler	LogoutSuccessHandler implementation that will perform a request dispatcher "forward" to the specified target URL.
GlobalAuthenticationConfigurerAdapter	A SecurityConfigurer that can be exposed as a bean to configure the global AuthenticationManagerBuilder.
GlobalMethodSecurityBeanDefinitionParser	Processes the top-level "global-method-security" element.
GlobalMethodSecurityConfiguration	Base Configuration for enabling global method security.
GrantedAuthoritiesContainer	Indicates that a object stores GrantedAuthority objects.
GrantedAuthoritiesMapper	Mapping interface which can be injected into the authentication layer to convert the authorities loaded from storage into those which will be used in the Authentication object.
GrantedAuthority	Represents an authority granted to an Authentication object.
GrantedAuthorityDefaults	Allows providing defaults for GrantedAuthority
GrantedAuthorityFromAssertionAttributesUserDetailsService	Populates the GrantedAuthoritys for a user by reading a list of attributes that were returned as part of the CAS response.
GrantedAuthoritySid	Represents a GrantedAuthority as a Sid.
GroupManager	Allows management of groups of authorities and their members.
Header	Represents a Header to be added to the HttpServletResponse
HeaderBearerTokenResolver	Generic resolver extracting pre-authenticated JWT identity from a custom header.
HeadersBeanDefinitionParser	Parser for the HeadersFilter.
HeadersConfigurer<H extends HttpSecurityBuilder<H>>	Adds the Security HTTP headers to the response.
HeaderWriter	Contract for writing headers to a HttpServletResponse
HeaderWriterFilter	Filter implementation to add headers to the current response.
HeaderWriterLogoutHandler
HeaderWriterServerLogoutHandler	A ServerLogoutHandler implementation which writes HTTP headers during logout.
Hex	Hex data encoder.
HpkpHeaderWriter	Provides support for HTTP Public Key Pinning (HPKP).
HstsHeaderWriter	Provides support for HTTP Strict Transport Security (HSTS).
Http403ForbiddenEntryPoint	In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.
HttpBasicConfigurer<B extends HttpSecurityBuilder<B>>	Adds HTTP basic based authentication.
HttpBasicServerAuthenticationEntryPoint	Prompts a user for HTTP Basic authentication.
HttpFirewall	Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.
HttpFirewallBeanDefinitionParser	Injects the supplied HttpFirewall bean reference into the FilterChainProxy.
HttpHeaderWriterWebFilter	Invokes a ServerHttpHeadersWriter on ReactiveHttpOutputMessage.beforeCommit(java.util.function.Supplier).
HttpRequestResponseHolder	Deprecated. Use SecurityContextRepository.loadContext(HttpServletRequest)
HttpSecurity	A HttpSecurity is similar to Spring Security's XML <http> element in the namespace configuration.
HttpSecurityBeanDefinitionParser	Sets up HTTP security: filter stack and protected URLs.
HttpSecurityBuilder<H extends HttpSecurityBuilder<H>>
HttpSessionCreatedEvent	Published by the HttpSessionEventPublisher when an HttpSession is created by the container
HttpSessionCsrfTokenRepository	A CsrfTokenRepository that stores the CsrfToken in the HttpSession.
HttpSessionDestroyedEvent	Published by the HttpSessionEventPublisher when a HttpSession is removed from the container
HttpSessionEventPublisher	Declared in web.xml as
HttpSessionIdChangedEvent	Published by the HttpSessionEventPublisher when an HttpSession ID is changed.
HttpSessionLogoutRequestRepository	An implementation of an Saml2LogoutRequestRepository that stores Saml2LogoutRequest in the HttpSession.
HttpSessionOAuth2AuthorizationRequestRepository	An implementation of an AuthorizationRequestRepository that stores OAuth2AuthorizationRequest in the HttpSession.
HttpSessionOAuth2AuthorizedClientRepository	An implementation of an OAuth2AuthorizedClientRepository that stores OAuth2AuthorizedClient's in the HttpSession.
HttpSessionRequestCache	RequestCache which stores the SavedRequest in the HttpSession.
HttpSessionSaml2AuthenticationRequestRepository	A Saml2AuthenticationRequestRepository implementation that uses HttpSession to store and retrieve the AbstractSaml2AuthenticationRequest
HttpSessionSecurityContextRepository	A SecurityContextRepository implementation which stores the security context in the HttpSession between requests.
HttpsRedirectWebFilter	Redirects any non-HTTPS request to its HTTPS equivalent.
HttpStatusEntryPoint	An AuthenticationEntryPoint that sends a generic HttpStatus as a response.
HttpStatusRequestRejectedHandler	A simple implementation of RequestRejectedHandler that sends an error with configurable status code.
HttpStatusReturningLogoutSuccessHandler	Implementation of the LogoutSuccessHandler.
HttpStatusReturningServerLogoutSuccessHandler	Implementation of the ServerLogoutSuccessHandler.
HttpStatusServerAccessDeniedHandler	Sets the provided HTTP Status when access is denied.
HttpStatusServerEntryPoint	A ServerAuthenticationEntryPoint that sends a generic HttpStatus as a response.
IdentityUnavailableException	Thrown if an ACL identity could not be extracted from an object.
IdTokenClaimAccessor	A ClaimAccessor for the "claims" that can be returned in the ID Token, which provides information about the authentication of an End-User by an Authorization Server.
IdTokenClaimNames	The names of the "claims" defined by the OpenID Connect Core 1.0 specification that can be returned in the ID Token.
ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>	Deprecated. It is not recommended to use the implicit flow due to the inherent risks of returning access tokens in an HTTP redirect without any confirmation that it has been received by the client.
InetOrgPerson	UserDetails implementation whose properties are based on a subset of the LDAP schema for inetOrgPerson.
InetOrgPerson.Essence
InetOrgPersonContextMapper
InitialContextFactory	Deprecated. as of 5.6.0 with no replacement
InMemoryClientRegistrationRepository	A ClientRegistrationRepository that stores ClientRegistration(s) in-memory.
InMemoryConfiguration	An in memory representation of a JAAS configuration.
InMemoryOAuth2AuthorizedClientService	An OAuth2AuthorizedClientService that stores Authorized Client(s) in-memory.
InMemoryReactiveClientRegistrationRepository	A Reactive ClientRegistrationRepository that stores ClientRegistration(s) in-memory.
InMemoryReactiveOAuth2AuthorizedClientService	An OAuth2AuthorizedClientService that stores Authorized Client(s) in-memory.
InMemoryRelyingPartyRegistrationRepository
InMemoryResource	An in memory implementation of Spring's Resource interface.
InMemoryTokenRepositoryImpl	Simple PersistentTokenRepository implementation backed by a Map.
InMemoryUserDetailsManager	Non-persistent implementation of UserDetailsManager which is backed by an in-memory map.
InMemoryUserDetailsManagerConfigurer<B extends ProviderManagerBuilder<B>>	Configures an AuthenticationManagerBuilder to have in memory authentication.
InsecureChannelProcessor	Ensures channel security is inactive by review of HttpServletRequest.isSecure() responses.
InsufficientAuthenticationException	Thrown if an authentication request is rejected because the credentials are not sufficiently trusted.
InteractiveAuthenticationSuccessEvent	Indicates an interactive authentication was successful.
InterceptMethodsBeanDefinitionDecorator
InterceptorStatusToken	A return object received by AbstractSecurityInterceptor subclasses.
InternalAuthenticationServiceException	Thrown if an authentication request could not be processed due to a system problem that occurred internally.
InvalidBearerTokenException	An OAuth2AuthenticationException that indicates an invalid bearer token.
InvalidCookieException	Exception thrown by a RememberMeServices implementation to indicate that a submitted cookie is of an invalid format or has expired.
InvalidCsrfTokenException	Thrown when an expected CsrfToken exists, but it does not match the value present on the HttpServletRequest
InvalidSessionAccessDeniedHandler	An adapter of InvalidSessionStrategy to AccessDeniedHandler
InvalidSessionStrategy	Determines the behaviour of the SessionManagementFilter when an invalid session Id is submitted and detected in the SessionManagementFilter.
IpAddressMatcher	Matches a request based on IP Address or subnet mask matching against the remote address.
IpAddressReactiveAuthorizationManager	A ReactiveAuthorizationManager, that determines if the current request contains the specified address or range of addresses
IpAddressServerWebExchangeMatcher	Matches a request based on IP Address or subnet mask matching against the remote address.
J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource	Implementation of AuthenticationDetailsSource which converts the user's J2EE roles (as obtained by calling HttpServletRequest.isUserInRole(String)) into GrantedAuthoritys and stores these in the authentication details object.
J2eePreAuthenticatedProcessingFilter	This AbstractPreAuthenticatedProcessingFilter implementation is based on the J2EE container-based authentication mechanism.
JaasApiIntegrationFilter	A Filter which attempts to obtain a JAAS Subject and continue the FilterChain running as that Subject.
JaasAuthenticationCallbackHandler	The JaasAuthenticationCallbackHandler is similar to the javax.security.auth.callback.CallbackHandler interface in that it defines a handle method.
JaasAuthenticationEvent	Parent class for events fired by the JaasAuthenticationProvider.
JaasAuthenticationFailedEvent	Fired when LoginContext.login throws a LoginException, or if any other exception is thrown during that time.
JaasAuthenticationProvider	An AuthenticationProvider implementation that retrieves user details from a JAAS login configuration.
JaasAuthenticationSuccessEvent	Fired by the JaasAuthenticationProvider after successfully logging the user into the LoginContext, handling all callbacks, and calling all AuthorityGranters.
JaasAuthenticationToken	UsernamePasswordAuthenticationToken extension to carry the Jaas LoginContext that the user was logged into
JaasGrantedAuthority	GrantedAuthority which, in addition to the assigned role, holds the principal that an AuthorityGranter used as a reason to grant this authority.
JaasNameCallbackHandler	The most basic Callbacks to be handled when using a LoginContext from JAAS, are the NameCallback and PasswordCallback.
JaasPasswordCallbackHandler	The most basic Callbacks to be handled when using a LoginContext from JAAS, are the NameCallback and PasswordCallback.
JdbcAclService	Simple JDBC-based implementation of AclService.
JdbcDaoImpl	UserDetailsService implementation which retrieves the user details (username, password, enabled flag, and authorities) from a database using JDBC queries.
JdbcMutableAclService	Provides a base JDBC implementation of MutableAclService.
JdbcOAuth2AuthorizedClientService	A JDBC implementation of an OAuth2AuthorizedClientService that uses a JdbcOperations for OAuth2AuthorizedClient persistence.
JdbcOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder	A holder for an OAuth2AuthorizedClient and End-User Authentication (Resource Owner).
JdbcOAuth2AuthorizedClientService.OAuth2AuthorizedClientParametersMapper	The default Function that maps JdbcOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder to a List of SqlParameterValue.
JdbcOAuth2AuthorizedClientService.OAuth2AuthorizedClientRowMapper	The default RowMapper that maps the current row in java.sql.ResultSet to OAuth2AuthorizedClient.
JdbcTokenRepositoryImpl	JDBC based persistent login token repository implementation.
JdbcUserDetailsManager	Jdbc user management service, based on the same table structure as its parent class, JdbcDaoImpl.
JdbcUserDetailsManagerConfigurer<B extends ProviderManagerBuilder<B>>	Configures an AuthenticationManagerBuilder to have JDBC authentication.
JdbcUserServiceBeanDefinitionParser
JeeConfigurer<H extends HttpSecurityBuilder<H>>	Adds support for J2EE pre authentication.
JndiDnsResolver	Deprecated. as of 5.6.0 with no replacement
JoseHeaderNames	The Registered Header Parameter Names defined by the JSON Web Token (JWT), JSON Web Signature (JWS) and JSON Web Encryption (JWE) specifications that may be contained in the JOSE Header of a JWT.
JspAuthorizeTag	A JSP Tag implementation of AbstractAuthorizeTag.
Jsr250AuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating if the Authentication contains a specified authority from the JSR-250 security annotations.
Jsr250MethodSecurityMetadataSource	Sources method security metadata from major JSR 250 security annotations.
Jsr250SecurityConfig	Security config applicable as a JSR 250 annotation attribute.
Jsr250Voter	Voter on JSR-250 configuration attributes.
JwaAlgorithm	Super interface for cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web Signature (JWS) to digitally sign or create a MAC of the contents and JSON Web Encryption (JWE) to encrypt the contents.
JwsAlgorithm	Super interface for cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web Signature (JWS) to digitally sign or create a MAC of the contents of the JWS Protected Header and JWS Payload.
JwsAlgorithms	The cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web Signature (JWS) to digitally sign or create a MAC of the contents of the JWS Protected Header and JWS Payload.
JwsHeader	The JSON Web Signature (JWS) header is a JSON object representing the header parameters of a JSON Web Token, that describe the cryptographic operations used to digitally sign or create a MAC of the contents of the JWS Protected Header and JWS Payload.
JwsHeader.Builder	A builder for JwsHeader.
Jwt	An implementation of an AbstractOAuth2Token representing a JSON Web Token (JWT).
Jwt.Builder	Helps configure a Jwt
JwtAuthenticationConverter
JwtAuthenticationProvider	An AuthenticationProvider implementation of the Jwt-encoded Bearer Tokens for protecting OAuth 2.0 Resource Servers.
JwtAuthenticationToken	An implementation of an AbstractOAuth2TokenAuthenticationToken representing a Jwt Authentication.
JwtBearerGrantRequest	A JWT Bearer Grant request that holds a Jwt assertion.
JwtBearerGrantRequestEntityConverter	An implementation of an AbstractOAuth2AuthorizationGrantRequestEntityConverter that converts the provided JwtBearerGrantRequest to a RequestEntity representation of an OAuth 2.0 Access Token Request for the JWT Bearer Grant.
JwtBearerOAuth2AuthorizedClientProvider	An implementation of an OAuth2AuthorizedClientProvider for the jwt-bearer grant.
JwtBearerReactiveOAuth2AuthorizedClientProvider	An implementation of an ReactiveOAuth2AuthorizedClientProvider for the jwt-bearer grant.
JwtBearerTokenAuthenticationConverter	A Converter that takes a Jwt and converts it into a BearerTokenAuthentication.
JwtClaimAccessor	A ClaimAccessor for the "claims" that may be contained in the JSON object JWT Claims Set of a JSON Web Token (JWT).
JwtClaimNames	The Registered Claim Names defined by the JSON Web Token (JWT) specification that may be contained in the JSON object JWT Claims Set.
JwtClaimsSet	The JWT Claims Set is a JSON object representing the claims conveyed by a JSON Web Token.
JwtClaimsSet.Builder	A builder for JwtClaimsSet.
JwtClaimValidator<T>	Validates a claim in a Jwt against a provided Predicate
JwtDecoder	Implementations of this interface are responsible for "decoding" a JSON Web Token (JWT) from it's compact claims representation format to a Jwt.
JwtDecoderFactory<C>	A factory for JwtDecoder(s).
JwtDecoderInitializationException	An exception thrown when a JwtDecoder or ReactiveJwtDecoder's lazy initialization fails.
JwtDecoders	Allows creating a JwtDecoder from an OpenID Provider Configuration or Authorization Server Metadata Request based on provided issuer and method invoked.
JwtEncoder	Implementations of this interface are responsible for encoding a JSON Web Token (JWT) to it's compact claims representation format.
JwtEncoderParameters	A holder of parameters containing the JWS headers and JWT Claims Set.
JwtEncodingException	This exception is thrown when an error occurs while attempting to encode a JSON Web Token (JWT).
JwtException	Base exception for all JSON Web Token (JWT) related errors.
JwtGrantedAuthoritiesConverter	Extracts the GrantedAuthoritys from scope attributes typically found in a Jwt.
JwtIssuerAuthenticationManagerResolver	An implementation of AuthenticationManagerResolver that resolves a JWT-based AuthenticationManager based on the Issuer in a signed JWT (JWS).
JwtIssuerReactiveAuthenticationManagerResolver	An implementation of ReactiveAuthenticationManagerResolver that resolves a JWT-based ReactiveAuthenticationManager based on the Issuer in a signed JWT (JWS).
JwtIssuerValidator	Validates the "iss" claim in a Jwt, that is matches a configured value
JwtReactiveAuthenticationManager	A ReactiveAuthenticationManager for Jwt tokens.
JwtTimestampValidator	An implementation of OAuth2TokenValidator for verifying claims in a Jwt-based access token
JwtValidationException	An exception that results from an unsuccessful OAuth2TokenValidatorResult
JwtValidators	Provides factory methods for creating OAuth2TokenValidator<Jwt>
KeyBasedPersistenceTokenService	Basic implementation of TokenService that is compatible with clusters and across machine restarts, without requiring database persistence.
KeyGenerators	Factory for commonly used key generators.
LazyCsrfTokenRepository	A CsrfTokenRepository that delays saving new CsrfToken until the attributes of the CsrfToken that were generated are accessed.
LdapAuthenticationProvider	An AuthenticationProvider implementation that authenticates against an LDAP server.
LdapAuthenticationProviderConfigurer<B extends ProviderManagerBuilder<B>>	Configures LDAP AuthenticationProvider in the ProviderManagerBuilder.
LdapAuthenticator	The strategy interface for locating and authenticating an Ldap user.
LdapAuthoritiesPopulator	Obtains a list of granted authorities for an Ldap user.
LdapAuthority	An authority that contains at least a DN and a role name for an LDAP entry but can also contain other desired attributes to be fetched during an LDAP authority search.
LdapBindAuthenticationManagerFactory	Creates an AuthenticationManager that can perform LDAP authentication using bind authentication.
LdapJackson2Module	Jackson module for spring-security-ldap.
LdapPasswordComparisonAuthenticationManagerFactory	Creates an AuthenticationManager that can perform LDAP authentication using password comparison.
LdapProviderBeanDefinitionParser	Ldap authentication provider namespace configuration.
LdapServerBeanDefinitionParser
LdapShaPasswordEncoder	Deprecated. Digest based password encoding is not considered secure.
LdapUserDetails	Captures the information for a user's LDAP entry.
LdapUserDetailsImpl	A UserDetails implementation which is used internally by the Ldap services.
LdapUserDetailsImpl.Essence	Variation of essence pattern.
LdapUserDetailsManager	An Ldap implementation of UserDetailsManager.
LdapUserDetailsMapper	The context mapper used by the LDAP authentication provider to create an LDAP user object.
LdapUserDetailsService	LDAP implementation of UserDetailsService based around an LdapUserSearch and an LdapAuthoritiesPopulator.
LdapUsernameToDnMapper	Constructs an Ldap Distinguished Name from a username.
LdapUserSearch	Obtains a user's information from the LDAP directory given a login name.
LdapUserServiceBeanDefinitionParser
LdapUtils	LDAP Utility methods.
ListeningSecurityContextHolderStrategy	An API for notifying when the SecurityContext changes.
LockedException	Thrown if an authentication request is rejected because the account is locked.
LoggerListener	Outputs interceptor-related application events to Commons Logging.
LoggerListener	Outputs authentication-related application events to Commons Logging.
LoginExceptionResolver	The JaasAuthenticationProvider takes an instance of LoginExceptionResolver to resolve LoginModule specific exceptions to Spring Security AuthenticationExceptions.
LoginPageGeneratingWebFilter	Generates a default log in page used for authenticating users.
LoginUrlAuthenticationEntryPoint	Used by the ExceptionTranslationFilter to commence a form login authentication via the UsernamePasswordAuthenticationFilter.
LogoutConfigurer<H extends HttpSecurityBuilder<H>>	Adds logout support.
LogoutFilter	Logs a principal out.
LogoutHandler	Indicates a class that is able to participate in logout handling.
LogoutPageGeneratingWebFilter	Generates a default log out page.
LogoutSuccessEvent	Application event which indicates successful logout
LogoutSuccessEventPublishingLogoutHandler	A logout handler which publishes LogoutSuccessEvent
LogoutSuccessHandler	Strategy that is called after a successful logout by the LogoutFilter, to handle redirection or forwarding to the appropriate destination.
LogoutWebFilter	If the request matches, logs an authenticated user out by delegating to a ServerLogoutHandler.
LookupStrategy	Performs lookups for AclService.
MacAlgorithm	An enumeration of the cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web Signature (JWS) to create a MAC of the contents of the JWS Protected Header and JWS Payload.
MapBasedAttributes2GrantedAuthoritiesMapper	This class implements the Attributes2GrantedAuthoritiesMapper and MappableAttributesRetriever interfaces based on the supplied Map.
MapBasedMethodSecurityMetadataSource	Stores a list of ConfigAttributes for a method or class signature.
MapOAuth2AccessTokenResponseConverter	Deprecated. Use DefaultMapOAuth2AccessTokenResponseConverter instead
MappableAttributesRetriever	Interface to be implemented by classes that can retrieve a list of mappable security attribute strings (for example the list of all available J2EE roles in a web or EJB application).
MappedJwtClaimSetConverter	Converts a JWT claim set, claim by claim.
MapReactiveUserDetailsService	A Map based implementation of ReactiveUserDetailsService
MatcherSecurityWebFilterChain	A SecurityWebFilterChain that leverages a ServerWebExchangeMatcher to determine which WebFilter to execute.
MatcherType	Defines the RequestMatcher types supported by the namespace.
Md4PasswordEncoder	Deprecated. Digest based password encoding is not considered secure.
MediaTypeRequestMatcher	Allows matching HttpServletRequest based upon the MediaType's resolved from a ContentNegotiationStrategy.
MediaTypeServerWebExchangeMatcher	Matches based upon the accept headers.
MessageAuthorizationContext<T>	An Message authorization context.
MessageAuthorizationContextSecurityExpressionHandler	An expression handler for MessageAuthorizationContext.
MessageDigestPasswordEncoder	Deprecated. Digest based password encoding is not considered secure.
MessageExpressionVoter<T>	Deprecated. Use MessageMatcherDelegatingAuthorizationManager instead
MessageMatcher<T>	API for determining if a Message should be matched on.
MessageMatcherDelegatingAuthorizationManager
MessageMatcherDelegatingAuthorizationManager.Builder	A builder for MessageMatcherDelegatingAuthorizationManager.
MessageSecurityExpressionRoot	The SecurityExpressionRoot used for Message expressions.
MessageSecurityMetadataSource	Deprecated. Use MessageMatcherDelegatingAuthorizationManager instead
MessageSecurityMetadataSourceRegistry	Deprecated. Use MessageMatcherDelegatingAuthorizationManager instead
MethodExpressionAuthorizationManager	An expression-based AuthorizationManager that determines the access by evaluating the provided expression against the MethodInvocation.
MethodInvocationAdapter	Decorates a JoinPoint to allow it to be used with method-security infrastructure classes which support MethodInvocation instances.
MethodInvocationPrivilegeEvaluator	Allows users to determine whether they have "before invocation" privileges for a given method invocation.
MethodInvocationResult	A context object that contains a MethodInvocation and the result of that MethodInvocation.
MethodInvocationUtils	Static utility methods for creating MethodInvocations usable within Spring Security.
MethodSecurityBeanDefinitionParser	Processes the top-level "method-security" element.
MethodSecurityBeanDefinitionParser.Jsr250AuthorizationMethodInterceptor
MethodSecurityBeanDefinitionParser.MethodSecurityExpressionHandlerBean
MethodSecurityBeanDefinitionParser.PostAuthorizeAuthorizationMethodInterceptor
MethodSecurityBeanDefinitionParser.PreAuthorizeAuthorizationMethodInterceptor
MethodSecurityExpressionHandler	Extended expression-handler facade which adds methods which are specific to securing method invocations.
MethodSecurityExpressionOperations	Interface which must be implemented if you want to use filtering in method security expressions.
MethodSecurityInterceptor	Provides security interception of AOP Alliance based method invocations.
MethodSecurityMetadataSource	Interface for SecurityMetadataSource implementations that are designed to perform lookups keyed on Methods.
MethodSecurityMetadataSourceAdvisor	Advisor driven by a MethodSecurityMetadataSource, used to exclude a MethodInterceptor from public (non-secure) methods.
MethodSecurityMetadataSourceBeanDefinitionParser
MissingCsrfTokenException	Thrown when no expected CsrfToken is found but is required.
MutableAcl	A mutable Acl.
MutableAclService	Provides support for creating and storing Acl instances.
MvcRequestMatcher	A RequestMatcher that uses Spring MVC's HandlerMappingIntrospector to match the path and extract variables.
NegatedRequestMatcher	A RequestMatcher that will negate the RequestMatcher passed in.
NegatedServerWebExchangeMatcher	Negates the provided matcher.
NestedLdapAuthoritiesPopulator	A LDAP authority populator that can recursively search static nested groups.
NimbusAuthorizationCodeTokenResponseClient	Deprecated. Use DefaultAuthorizationCodeTokenResponseClient
NimbusJwtClientAuthenticationParametersConverter<T extends AbstractOAuth2AuthorizationGrantRequest>	A Converter that customizes the OAuth 2.0 Access Token Request parameters by adding a signed JSON Web Token (JWS) to be used for client authentication at the Authorization Server's Token Endpoint.
NimbusJwtClientAuthenticationParametersConverter.JwtClientAuthenticationContext<T extends AbstractOAuth2AuthorizationGrantRequest>	A context that holds client authentication-specific state and is used by NimbusJwtClientAuthenticationParametersConverter when attempting to customize the JSON Web Token (JWS) client assertion.
NimbusJwtDecoder	A low-level Nimbus implementation of JwtDecoder which takes a raw Nimbus configuration.
NimbusJwtDecoder.JwkSetUriJwtDecoderBuilder	A builder for creating NimbusJwtDecoder instances based on a JWK Set uri.
NimbusJwtDecoder.PublicKeyJwtDecoderBuilder	A builder for creating NimbusJwtDecoder instances based on a public key.
NimbusJwtDecoder.SecretKeyJwtDecoderBuilder	A builder for creating NimbusJwtDecoder instances based on a SecretKey.
NimbusJwtDecoderJwkSupport	Deprecated. Use NimbusJwtDecoder or JwtDecoders instead
NimbusJwtEncoder	An implementation of a JwtEncoder that encodes a JSON Web Token (JWT) using the JSON Web Signature (JWS) Compact Serialization format.
NimbusOpaqueTokenIntrospector	A Nimbus implementation of OpaqueTokenIntrospector that verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint.
NimbusReactiveJwtDecoder	An implementation of a ReactiveJwtDecoder that "decodes" a JSON Web Token (JWT) and additionally verifies it's digital signature if the JWT is a JSON Web Signature (JWS).
NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder	A builder for creating NimbusReactiveJwtDecoder instances based on a JWK Set uri.
NimbusReactiveJwtDecoder.JwkSourceReactiveJwtDecoderBuilder	A builder for creating NimbusReactiveJwtDecoder instances.
NimbusReactiveJwtDecoder.PublicKeyReactiveJwtDecoderBuilder	A builder for creating NimbusReactiveJwtDecoder instances based on a public key.
NimbusReactiveJwtDecoder.SecretKeyReactiveJwtDecoderBuilder	A builder for creating NimbusReactiveJwtDecoder instances based on a SecretKey.
NimbusReactiveOpaqueTokenIntrospector	A Nimbus implementation of ReactiveOpaqueTokenIntrospector that verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint.
NonceExpiredException	Thrown if an authentication request is rejected because the digest nonce has expired.
NoOpPasswordEncoder	Deprecated. This PasswordEncoder is not secure.
NoOpServerRequestCache	An implementation of ServerRequestCache that does nothing.
NoOpServerSecurityContextRepository	A do nothing implementation of ServerSecurityContextRepository.
NotFoundException	Thrown if an ACL-related object cannot be found.
NullAuthenticatedSessionStrategy
NullAuthoritiesMapper
NullAxFetchListFactory	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
NullLdapAuthoritiesPopulator
NullRememberMeServices	Implementation of NullRememberMeServices that does nothing.
NullRequestCache	Null implementation of RequestCache.
NullRoleHierarchy
NullSecurityContextRepository
NullStatelessTicketCache	Implementation of @link StatelessTicketCache that has no backing cache.
NullUserCache	Does not perform any caching.
OAuth2AccessToken	An implementation of an AbstractOAuth2Token representing an OAuth 2.0 Access Token.
OAuth2AccessToken.TokenType	Access Token Types.
OAuth2AccessTokenResponse	A representation of an OAuth 2.0 Access Token Response.
OAuth2AccessTokenResponse.Builder	A builder for OAuth2AccessTokenResponse.
OAuth2AccessTokenResponseClient<T extends AbstractOAuth2AuthorizationGrantRequest>	A strategy for "exchanging" an authorization grant credential (e.g.
OAuth2AccessTokenResponseHttpMessageConverter	A HttpMessageConverter for an OAuth 2.0 Access Token Response.
OAuth2AccessTokenResponseMapConverter	Deprecated. Use DefaultOAuth2AccessTokenResponseMapConverter instead
OAuth2AuthenticatedPrincipal	An AuthenticatedPrincipal that represents the principal associated with an OAuth 2.0 token.
OAuth2AuthenticationException	This exception is thrown for all OAuth 2.0 related Authentication errors.
OAuth2AuthenticationToken	An implementation of an AbstractAuthenticationToken that represents an OAuth 2.0 Authentication.
OAuth2AuthorizationCodeAuthenticationProvider	An implementation of an AuthenticationProvider for the OAuth 2.0 Authorization Code Grant.
OAuth2AuthorizationCodeAuthenticationToken	An AbstractAuthenticationToken for the OAuth 2.0 Authorization Code Grant.
OAuth2AuthorizationCodeGrantFilter	A Filter for the OAuth 2.0 Authorization Code Grant, which handles the processing of the OAuth 2.0 Authorization Response.
OAuth2AuthorizationCodeGrantRequest	An OAuth 2.0 Authorization Code Grant request that holds an Authorization Code credential, which was granted by the Resource Owner to the Client.
OAuth2AuthorizationCodeGrantRequestEntityConverter	An implementation of an AbstractOAuth2AuthorizationGrantRequestEntityConverter that converts the provided OAuth2AuthorizationCodeGrantRequest to a RequestEntity representation of an OAuth 2.0 Access Token Request for the Authorization Code Grant.
OAuth2AuthorizationCodeGrantWebFilter	A Filter for the OAuth 2.0 Authorization Code Grant, which handles the processing of the OAuth 2.0 Authorization Response.
OAuth2AuthorizationCodeReactiveAuthenticationManager	An implementation of an AuthenticationProvider for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OAuth2AuthorizationContext	A context that holds authorization-specific state and is used by an OAuth2AuthorizedClientProvider when attempting to authorize (or re-authorize) an OAuth 2.0 Client.
OAuth2AuthorizationContext.Builder	A builder for OAuth2AuthorizationContext.
OAuth2AuthorizationException	Base exception for OAuth 2.0 Authorization errors.
OAuth2AuthorizationExchange	An "exchange" of an OAuth 2.0 Authorization Request and Response for the authorization code grant type.
OAuth2AuthorizationFailureHandler	Handles when an OAuth 2.0 Client fails to authorize (or re-authorize) via the Authorization Server or Resource Server.
OAuth2AuthorizationRequest	A representation of an OAuth 2.0 Authorization Request for the authorization code grant type or implicit grant type.
OAuth2AuthorizationRequest.Builder	A builder for OAuth2AuthorizationRequest.
OAuth2AuthorizationRequestCustomizers	A factory of customizers that customize the OAuth 2.0 Authorization Request via the OAuth2AuthorizationRequest.Builder.
OAuth2AuthorizationRequestRedirectFilter	This Filter initiates the authorization code grant or implicit grant flow by redirecting the End-User's user-agent to the Authorization Server's Authorization Endpoint.
OAuth2AuthorizationRequestRedirectWebFilter	This WebFilter initiates the authorization code grant or implicit grant flow by redirecting the End-User's user-agent to the Authorization Server's Authorization Endpoint.
OAuth2AuthorizationRequestResolver	Implementations of this interface are capable of resolving an OAuth2AuthorizationRequest from the provided HttpServletRequest.
OAuth2AuthorizationResponse	A representation of an OAuth 2.0 Authorization Response for the authorization code grant type.
OAuth2AuthorizationResponse.Builder	A builder for OAuth2AuthorizationResponse.
OAuth2AuthorizationResponseType	The response_type parameter is consumed by the authorization endpoint which is used by the authorization code grant type and implicit grant type.
OAuth2AuthorizationSuccessHandler	Handles when an OAuth 2.0 Client has been successfully authorized (or re-authorized) via the Authorization Server.
OAuth2AuthorizedClient	A representation of an OAuth 2.0 "Authorized Client".
OAuth2AuthorizedClientArgumentResolver	An implementation of a HandlerMethodArgumentResolver that is capable of resolving a method parameter to an argument value of type OAuth2AuthorizedClient.
OAuth2AuthorizedClientArgumentResolver	An implementation of a HandlerMethodArgumentResolver that is capable of resolving a method parameter to an argument value of type OAuth2AuthorizedClient.
OAuth2AuthorizedClientId	The identifier for OAuth2AuthorizedClient.
OAuth2AuthorizedClientManager	Implementations of this interface are responsible for the overall management of Authorized Client(s).
OAuth2AuthorizedClientProvider	A strategy for authorizing (or re-authorizing) an OAuth 2.0 Client.
OAuth2AuthorizedClientProviderBuilder	A builder that builds a DelegatingOAuth2AuthorizedClientProvider composed of one or more OAuth2AuthorizedClientProvider(s) that implement specific authorization grants.
OAuth2AuthorizedClientRepository	Implementations of this interface are responsible for the persistence of Authorized Client(s) between requests.
OAuth2AuthorizedClientService	Implementations of this interface are responsible for the management of Authorized Client(s), which provide the purpose of associating an Access Token credential to a Client and Resource Owner, who is the Principal that originally granted the authorization.
OAuth2AuthorizeRequest	Represents a request the OAuth2AuthorizedClientManager uses to authorize (or re-authorize) the client identified by the provided clientRegistrationId.
OAuth2AuthorizeRequest.Builder	A builder for OAuth2AuthorizeRequest.
OAuth2BodyExtractors	Static factory methods for OAuth2 BodyExtractor implementations.
OAuth2ClientConfigurer<B extends HttpSecurityBuilder<B>>	An AbstractHttpConfigurer for OAuth 2.0 Client support.
OAuth2ClientCredentialsGrantRequest	An OAuth 2.0 Client Credentials Grant request that holds the client's credentials in AbstractOAuth2AuthorizationGrantRequest.getClientRegistration().
OAuth2ClientCredentialsGrantRequestEntityConverter	An implementation of an AbstractOAuth2AuthorizationGrantRequestEntityConverter that converts the provided OAuth2ClientCredentialsGrantRequest to a RequestEntity representation of an OAuth 2.0 Access Token Request for the Client Credentials Grant.
OAuth2ClientJackson2Module	Jackson Module for spring-security-oauth2-client, that registers the following mix-in annotations: OAuth2AuthorizationRequestMixin ClientRegistrationMixin OAuth2AccessTokenMixin OAuth2RefreshTokenMixin OAuth2AuthorizedClientMixin OAuth2UserAuthorityMixin DefaultOAuth2UserMixin OidcIdTokenMixin OidcUserInfoMixin OidcUserAuthorityMixin DefaultOidcUserMixin OAuth2AuthenticationTokenMixin OAuth2AuthenticationExceptionMixin OAuth2ErrorMixin If not already enabled, default typing will be automatically enabled as type info is required to properly serialize/deserialize objects.
OAuth2Error	A representation of an OAuth 2.0 Error.
OAuth2ErrorCodes	Standard error codes defined by the OAuth 2.0 Authorization Framework.
OAuth2ErrorHttpMessageConverter	A HttpMessageConverter for an OAuth 2.0 Error.
OAuth2ErrorResponseErrorHandler	A ResponseErrorHandler that handles an OAuth 2.0 Error.
OAuth2IntrospectionAuthenticatedPrincipal	A domain object that wraps the attributes of OAuth 2.0 Token Introspection.
OAuth2IntrospectionClaimAccessor	Deprecated. Use OAuth2TokenIntrospectionClaimAccessor instead
OAuth2IntrospectionClaimNames	Deprecated. Use OAuth2TokenIntrospectionClaimNames instead
OAuth2IntrospectionException	Base exception for all OAuth 2.0 Introspection related errors
OAuth2LoginAuthenticationFilter	An implementation of an AbstractAuthenticationProcessingFilter for OAuth 2.0 Login.
OAuth2LoginAuthenticationProvider	An implementation of an AuthenticationProvider for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OAuth2LoginAuthenticationToken	An AbstractAuthenticationToken for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OAuth2LoginAuthenticationWebFilter	A specialized AuthenticationWebFilter that converts from an OAuth2LoginAuthenticationToken to an OAuth2AuthenticationToken and saves the OAuth2AuthorizedClient
OAuth2LoginConfigurer<B extends HttpSecurityBuilder<B>>	An AbstractHttpConfigurer for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OAuth2LoginReactiveAuthenticationManager	An implementation of an AuthenticationProvider for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OAuth2ParameterNames	Standard and custom (non-standard) parameter names defined in the OAuth Parameters Registry and used by the authorization endpoint, token endpoint and token revocation endpoint.
OAuth2PasswordGrantRequest	Deprecated. The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.
OAuth2PasswordGrantRequestEntityConverter	An implementation of an AbstractOAuth2AuthorizationGrantRequestEntityConverter that converts the provided OAuth2PasswordGrantRequest to a RequestEntity representation of an OAuth 2.0 Access Token Request for the Resource Owner Password Credentials Grant.
OAuth2RefreshToken	An implementation of an AbstractOAuth2Token representing an OAuth 2.0 Refresh Token.
OAuth2RefreshTokenGrantRequest	An OAuth 2.0 Refresh Token Grant request that holds the refresh token credential granted to the client.
OAuth2RefreshTokenGrantRequestEntityConverter	An implementation of an AbstractOAuth2AuthorizationGrantRequestEntityConverter that converts the provided OAuth2RefreshTokenGrantRequest to a RequestEntity representation of an OAuth 2.0 Access Token Request for the Refresh Token Grant.
OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>>	An AbstractHttpConfigurer for OAuth 2.0 Resource Server Support.
OAuth2Token	Core interface representing an OAuth 2.0 Token.
OAuth2TokenIntrospectionClaimAccessor	A ClaimAccessor for the "claims" that may be contained in the Introspection Response.
OAuth2TokenIntrospectionClaimNames	The names of the "Introspection Claims" defined by an Introspection Response.
OAuth2TokenValidator<T extends AbstractOAuth2Token>	Implementations of this interface are responsible for "verifying" the validity and/or constraints of the attributes contained in an OAuth 2.0 Token.
OAuth2TokenValidatorResult	A result emitted from an OAuth2TokenValidator validation attempt
OAuth2User	A representation of a user Principal that is registered with an OAuth 2.0 Provider.
OAuth2UserAuthority	A GrantedAuthority that may be associated to an OAuth2User.
OAuth2UserRequest	Represents a request the OAuth2UserService uses when initiating a request to the UserInfo Endpoint.
OAuth2UserRequestEntityConverter	A Converter that converts the provided OAuth2UserRequest to a RequestEntity representation of a request for the UserInfo Endpoint.
OAuth2UserService<R extends OAuth2UserRequest,U extends OAuth2User>	Implementations of this interface are responsible for obtaining the user attributes of the End-User (Resource Owner) from the UserInfo Endpoint using the Access Token granted to the Client and returning an AuthenticatedPrincipal in the form of an OAuth2User.
ObjectIdentity	Represents the identity of an individual domain object instance.
ObjectIdentityGenerator	Strategy which creates an ObjectIdentity from an object identifier (such as a primary key) and type information.
ObjectIdentityImpl	Simple implementation of ObjectIdentity.
ObjectIdentityRetrievalStrategy	Strategy interface that provides the ability to determine which ObjectIdentity will be returned for a particular domain object
ObjectIdentityRetrievalStrategyImpl	Basic implementation of ObjectIdentityRetrievalStrategy and ObjectIdentityGenerator that uses the constructors of ObjectIdentityImpl to create the ObjectIdentity.
ObjectPostProcessor<T>	Allows initialization of Objects.
ObjectPostProcessorConfiguration	Spring Configuration that exports the default ObjectPostProcessor.
OidcAuthorizationCodeAuthenticationProvider	An implementation of an AuthenticationProvider for the OpenID Connect Core 1.0 Authorization Code Grant Flow.
OidcAuthorizationCodeReactiveAuthenticationManager	An implementation of an AuthenticationProvider for OAuth 2.0 Login, which leverages the OAuth 2.0 Authorization Code Grant Flow.
OidcClientInitiatedLogoutSuccessHandler	A logout success handler for initiating OIDC logout through the user agent.
OidcClientInitiatedServerLogoutSuccessHandler	A reactive logout success handler for initiating OIDC logout through the user agent.
OidcIdToken	An implementation of an AbstractOAuth2Token representing an OpenID Connect Core 1.0 ID Token.
OidcIdToken.Builder	A builder for OidcIdTokens
OidcIdTokenDecoderFactory	A factory that provides a JwtDecoder used for OidcIdToken signature verification.
OidcIdTokenValidator	An OAuth2TokenValidator responsible for validating the claims in an ID Token.
OidcParameterNames	Standard parameter names defined in the OAuth Parameters Registry and used by the authorization endpoint and token endpoint.
OidcReactiveOAuth2UserService	An implementation of an ReactiveOAuth2UserService that supports OpenID Connect 1.0 Provider's.
OidcScopes	The scope values defined by the OpenID Connect Core 1.0 specification that can be used to request claims.
OidcUser	A representation of a user Principal that is registered with an OpenID Connect 1.0 Provider.
OidcUserAuthority	A GrantedAuthority that may be associated to an OidcUser.
OidcUserInfo	A representation of a UserInfo Response that is returned from the OAuth 2.0 Protected Resource UserInfo Endpoint.
OidcUserInfo.Builder	A builder for OidcUserInfos
OidcUserRequest	Represents a request the OidcUserService uses when initiating a request to the UserInfo Endpoint.
OidcUserService	An implementation of an OAuth2UserService that supports OpenID Connect 1.0 Provider's.
OnCommittedResponseWrapper	Base class for response wrappers which encapsulate the logic for handling an event when the HttpServletResponse is committed.
OpaqueTokenAuthenticationProvider	An AuthenticationProvider implementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes.
OpaqueTokenIntrospector	A contract for introspecting and verifying an OAuth 2.0 token.
OpaqueTokenReactiveAuthenticationManager	An ReactiveAuthenticationManager implementation for opaque Bearer Tokens, using an OAuth 2.0 Introspection Endpoint to check the token's validity and reveal its attributes.
OpenID4JavaConsumer	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDAttribute	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDAuthenticationFilter	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDAuthenticationProvider	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDAuthenticationStatus	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDAuthenticationToken	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDConsumer	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDConsumerException	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenIDLoginConfigurer<H extends HttpSecurityBuilder<H>>	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
OpenSamlAssertingPartyDetails	A RelyingPartyRegistration.AssertingPartyDetails that contains OpenSAML-specific members
OpenSamlAssertingPartyDetails.Builder	An OpenSAML version of RelyingPartyRegistration.AssertingPartyDetails.Builder that contains the underlying EntityDescriptor
OpenSamlInitializationService	An initialization service for initializing OpenSAML.
OpenSamlLogoutRequestValidator	A Saml2LogoutRequestValidator that authenticates a SAML 2.0 Logout Requests received from a SAML 2.0 Asserting Party using OpenSAML.
OpenSamlLogoutResponseValidator	A Saml2LogoutResponseValidator that authenticates a SAML 2.0 Logout Responses received from a SAML 2.0 Asserting Party using OpenSAML.
OpenSamlMetadataResolver	Resolves the SAML 2.0 Relying Party Metadata for a given RelyingPartyRegistration using the OpenSAML API.
OpenSamlMetadataResolver.EntityDescriptorParameters	A tuple containing an OpenSAML EntityDescriptor and its associated RelyingPartyRegistration
OpenSamlRelyingPartyRegistrationBuilderHttpMessageConverter	An HttpMessageConverter that takes an IDPSSODescriptor in an HTTP response and converts it into a RelyingPartyRegistration.Builder.
OrMessageMatcher<T>	MessageMatcher that will return true if any of the passed in MessageMatcher instances match.
OrRequestMatcher	RequestMatcher that will return true if any of the passed in RequestMatcher instances match.
OrServerWebExchangeMatcher	Matches if any of the provided ServerWebExchangeMatcher match
OwnershipAcl	A mutable ACL that provides ownership capabilities.
P	Deprecated. use @{code org.springframework.security.core.parameters.P}
P	An annotation that can be used along with AnnotationParameterNameDiscoverer to specify parameter names.
PasswordComparisonAuthenticator	An LdapAuthenticator which compares the login password with the value stored in the directory using a remote LDAP "compare" operation.
PasswordEncoder	Service interface for encoding passwords.
PasswordEncoderFactories	Used for creating PasswordEncoder instances
PasswordEncoderParser	Stateful parser for the <password-encoder> element.
PasswordManagementConfigurer<B extends HttpSecurityBuilder<B>>	Adds password management support.
PasswordOAuth2AuthorizedClientProvider	Deprecated. The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.
PasswordPolicyAwareContextSource	Extended version of the DefaultSpringSecurityContextSource which adds support for the use of PasswordPolicyControl to make use of user account data stored in the directory.
PasswordPolicyControl	A Password Policy request control.
PasswordPolicyControlExtractor	Obtains the PasswordPolicyControl from a context for use by other classes.
PasswordPolicyControlFactory	Transforms a control object to a PasswordPolicyResponseControl object, if appropriate.
PasswordPolicyData
PasswordPolicyErrorStatus	Defines status codes for use with PasswordPolicyException, with error codes (for message source lookup) and default messages.
PasswordPolicyException	Generic exception raised by the ppolicy package.
PasswordPolicyResponseControl	Represents the response control received when a PasswordPolicyControl is used when binding to a directory.
PasswordReactiveOAuth2AuthorizedClientProvider	Deprecated. The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.
PathPatternParserServerWebExchangeMatcher	Matches if the PathPattern matches the path within the application.
PayloadExchange	Contract for a Payload interaction.
PayloadExchangeAuthenticationConverter	Converts from a PayloadExchange to an Authentication
PayloadExchangeAuthorizationContext
PayloadExchangeMatcher	An interface for determining if a PayloadExchangeMatcher matches.
PayloadExchangeMatcher.MatchResult	The result of matching
PayloadExchangeMatcherEntry<T>
PayloadExchangeMatcherReactiveAuthorizationManager	Maps a @{code List} of PayloadExchangeMatcher instances to
PayloadExchangeMatcherReactiveAuthorizationManager.Builder
PayloadExchangeMatchers
PayloadExchangeType	The PayloadExchange type
PayloadInterceptor	Contract for interception-style, chained processing of Payloads that may be used to implement cross-cutting, application-agnostic requirements such as security, timeouts, and others.
PayloadInterceptorChain	Contract to allow a PayloadInterceptor to delegate to the next in the chain.
PayloadInterceptorOrder	The standard order for PayloadInterceptor to be sorted.
PayloadSocketAcceptorInterceptor	A SocketAcceptorInterceptor that applies the PayloadInterceptors
Pbkdf2PasswordEncoder	A PasswordEncoder implementation that uses PBKDF2 with : a configurable random salt value length (default is 8 bytes) a configurable number of iterations (default is 185000) a configurable output hash width (default is 256 bits) a configurable key derivation function (see Pbkdf2PasswordEncoder.SecretKeyFactoryAlgorithm) a configurable secret appended to the random salt (default is empty) The algorithm is invoked on the concatenated bytes of the salt, secret and password.
Pbkdf2PasswordEncoder.SecretKeyFactoryAlgorithm	The Algorithm used for creating the SecretKeyFactory
Permission	Represents a permission granted to a Sid for a given domain object.
PermissionCacheOptimizer	Allows permissions to be pre-cached when using pre or post filtering with expressions
PermissionEvaluator	Strategy used in expression evaluation to determine whether a user has a permission or permissions for a given domain object.
PermissionFactory	Provides a simple mechanism to retrieve Permission instances from integer masks.
PermissionGrantingStrategy	Allow customization of the logic for determining whether a permission or permissions are granted to a particular sid or sids by an Acl.
PermissionsPolicyHeaderWriter	Provides support for Permisisons Policy.
PermissionsPolicyServerHttpHeadersWriter	Writes the Permissions-Policy response header with configured policy directives.
PersistentRememberMeToken
PersistentTokenBasedRememberMeServices	RememberMeServices implementation based on Barry Jaspan's Improved Persistent Login Cookie Best Practice.
PersistentTokenRepository	The abstraction used by PersistentTokenBasedRememberMeServices to store the persistent login tokens for a user.
Person	UserDetails implementation whose properties are based on the LDAP schema for Person.
Person.Essence
PersonContextMapper
PkceParameterNames	Standard parameter names defined in the OAuth Parameters Registry and used by the authorization endpoint and token endpoint.
PortMapper	PortMapper implementations provide callers with information about which HTTP ports are associated with which HTTPS ports on the system, and vice versa.
PortMapperConfigurer<H extends HttpSecurityBuilder<H>>	Allows configuring a shared PortMapper instance used to determine the ports when redirecting between HTTP and HTTPS.
PortMapperImpl	Concrete implementation of PortMapper that obtains HTTP:HTTPS pairs from the application context.
PortResolver	A PortResolver determines the port a web request was received on.
PortResolverImpl	Concrete implementation of PortResolver that obtains the port from ServletRequest.getServerPort().
PostAuthorize	Annotation for specifying a method access-control expression which will be evaluated after a method has been invoked.
PostAuthorizeAuthorizationManager	An AuthorizationManager which can determine if an Authentication may return the result from an invoked MethodInvocation by evaluating an expression from the PostAuthorize annotation.
PostFilter	Annotation for specifying a method filtering expression which will be evaluated after a method has been invoked.
PostFilterAuthorizationMethodInterceptor	A MethodInterceptor which filters a returnedObject from the MethodInvocation by evaluating an expression from the PostFilter annotation.
PostInvocationAdviceProvider	AfterInvocationProvider which delegates to a PostInvocationAuthorizationAdvice instance passing it the PostInvocationAttribute created from @PostAuthorize and @PostFilter annotations.
PostInvocationAttribute	Marker interface for attributes which are created from combined @PostFilter and @PostAuthorize annotations.
PostInvocationAuthorizationAdvice	Performs filtering and authorization logic after a method is invoked.
PreAuthenticatedAuthenticationProvider	Processes a pre-authenticated authentication request.
PreAuthenticatedAuthenticationToken	Authentication implementation for pre-authenticated authentication.
PreAuthenticatedCredentialsNotFoundException
PreAuthenticatedGrantedAuthoritiesUserDetailsService	This AuthenticationUserDetailsService implementation creates a UserDetails object based solely on the information contained in the given PreAuthenticatedAuthenticationToken.
PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails	This WebAuthenticationDetails implementation allows for storing a list of pre-authenticated Granted Authorities.
PreAuthorize	Annotation for specifying a method access-control expression which will be evaluated to decide whether a method invocation is allowed or not.
PreAuthorizeAuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating an expression from the PreAuthorize annotation.
PreFilter	Annotation for specifying a method filtering expression which will be evaluated before a method has been invoked.
PreFilterAuthorizationMethodInterceptor	A MethodInterceptor which filters a method argument by evaluating an expression from the PreFilter annotation.
PreInvocationAttribute	Marker interface for attributes which are created from combined @PreFilter and @PreAuthorize annotations.
PreInvocationAuthorizationAdvice	Performs argument filtering and authorization logic before a method is invoked.
PreInvocationAuthorizationAdviceVoter	Voter which performs the actions using a PreInvocationAuthorizationAdvice implementation generated from @PreFilter and @PreAuthorize annotations.
PrePostAdviceReactiveMethodInterceptor	A MethodInterceptor that supports PreAuthorize and PostAuthorize for methods that return Mono or Flux and Kotlin coroutine functions.
PrePostAnnotationSecurityMetadataSource	MethodSecurityMetadataSource which extracts metadata from the @PreFilter and @PreAuthorize annotations placed on a method.
PrePostInvocationAttributeFactory
PrincipalSid	Represents an Authentication.getPrincipal() as a Sid.
ProviderManager	Iterates an Authentication request through a list of AuthenticationProviders.
ProviderManagerBuilder<B extends ProviderManagerBuilder<B>>	Interface for operating on a SecurityBuilder that creates a ProviderManager
ProviderNotFoundException	Thrown by ProviderManager if no AuthenticationProvider could be found that supports the presented Authentication object.
PublicInvocationEvent	Event that is generated whenever a public secure object is invoked.
R2dbcReactiveOAuth2AuthorizedClientService	A R2DBC implementation of ReactiveOAuth2AuthorizedClientService that uses a DatabaseClient for OAuth2AuthorizedClient persistence.
R2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder	A holder for OAuth2AuthorizedClient data and End-User Authentication (Resource Owner).
R2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientParametersMapper	The default Function that maps R2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder to a Map of String and Parameter.
R2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientRowMapper	The default BiFunction that maps the current io.r2dbc.spi.Row to a R2dbcReactiveOAuth2AuthorizedClientService.OAuth2AuthorizedClientHolder.
ReactiveAuthenticationManager	Determines if the provided Authentication can be authenticated.
ReactiveAuthenticationManagerAdapter	Adapts an AuthenticationManager to the reactive APIs.
ReactiveAuthenticationManagerResolver<C>	An interface for resolving a ReactiveAuthenticationManager based on the provided context
ReactiveAuthorizationManager<T>	A reactive authorization manager which can determine if an Authentication has access to a specific object.
ReactiveClientRegistrationRepository	A reactive repository for OAuth 2.0 / OpenID Connect 1.0 ClientRegistration(s).
ReactiveJwtAuthenticationConverter	Reactive version of JwtAuthenticationConverter for converting a Jwt to a Mono<AbstractAuthenticationToken>.
ReactiveJwtAuthenticationConverterAdapter	A reactive Converter for adapting a non-blocking imperative Converter
ReactiveJwtDecoder	Implementations of this interface are responsible for "decoding" a JSON Web Token (JWT) from it's compact claims representation format to a Jwt.
ReactiveJwtDecoderFactory<C>	A factory for ReactiveJwtDecoder(s).
ReactiveJwtDecoders	Allows creating a ReactiveJwtDecoder from an OpenID Provider Configuration or Authorization Server Metadata Request based on provided issuer and method invoked.
ReactiveJwtGrantedAuthoritiesConverterAdapter	Adapts a Converter<Jwt, Collection<GrantedAuthority>> to a Converter<Jwt, Flux<GrantedAuthority>>.
ReactiveOAuth2AccessTokenResponseClient<T extends AbstractOAuth2AuthorizationGrantRequest>	A reactive strategy for "exchanging" an authorization grant credential (e.g.
ReactiveOAuth2AuthorizationFailureHandler	Handles when an OAuth 2.0 Client fails to authorize (or re-authorize) via the authorization server or resource server.
ReactiveOAuth2AuthorizationSuccessHandler	Handles when an OAuth 2.0 Client has been successfully authorized (or re-authorized) via the authorization server.
ReactiveOAuth2AuthorizedClientManager	Implementations of this interface are responsible for the overall management of Authorized Client(s).
ReactiveOAuth2AuthorizedClientProvider	A strategy for authorizing (or re-authorizing) an OAuth 2.0 Client.
ReactiveOAuth2AuthorizedClientProviderBuilder	A builder that builds a DelegatingReactiveOAuth2AuthorizedClientProvider composed of one or more ReactiveOAuth2AuthorizedClientProvider(s) that implement specific authorization grants.
ReactiveOAuth2AuthorizedClientService	Implementations of this interface are responsible for the management of Authorized Client(s), which provide the purpose of associating an Access Token credential to a Client and Resource Owner, who is the Principal that originally granted the authorization.
ReactiveOAuth2UserService<R extends OAuth2UserRequest,U extends OAuth2User>	Implementations of this interface are responsible for obtaining the user attributes of the End-User (Resource Owner) from the UserInfo Endpoint using the Access Token granted to the Client and returning an AuthenticatedPrincipal in the form of an OAuth2User.
ReactiveOidcIdTokenDecoderFactory	A factory that provides a ReactiveJwtDecoder used for OidcIdToken signature verification.
ReactiveOpaqueTokenIntrospector	A contract for introspecting and verifying an OAuth 2.0 token.
ReactivePreAuthenticatedAuthenticationManager	Reactive version of PreAuthenticatedAuthenticationProvider This manager receives a PreAuthenticatedAuthenticationToken, checks that associated account is not disabled, expired, or blocked, and returns new authenticated PreAuthenticatedAuthenticationToken.
ReactiveSecurityContextHolder	Allows getting and setting the Spring SecurityContext into a Context.
ReactiveUserDetailsPasswordService	An API for changing a UserDetails password.
ReactiveUserDetailsService	An API for finding the UserDetails by username.
ReactiveUserDetailsServiceResourceFactoryBean	Constructs an MapReactiveUserDetailsService from a resource using UserDetailsResourceFactoryBean.
ReactorContextTestExecutionListener	Sets up the Reactor Context with the Authentication from the TestSecurityContextHolder and then clears the Reactor Context at the end of the tests.
ReactorContextWebFilter	Uses a ServerSecurityContextRepository to provide the SecurityContext to initialize the ReactiveSecurityContextHolder.
RedirectServerAuthenticationEntryPoint	Performs a redirect to a specified location.
RedirectServerAuthenticationFailureHandler	Performs a redirect to a specified location.
RedirectServerAuthenticationSuccessHandler	Performs a redirect on authentication success.
RedirectServerLogoutSuccessHandler	Performs a redirect on log out success.
RedirectStrategy	Encapsulates the redirection logic for all classes in the framework which perform redirects.
RedirectUrlBuilder	Internal class for building redirect URLs.
ReferrerPolicyHeaderWriter	Provides support for Referrer Policy.
ReferrerPolicyHeaderWriter.ReferrerPolicy
ReferrerPolicyServerHttpHeadersWriter	Writes the Referrer-Policy response header.
ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
RefreshTokenOAuth2AuthorizedClientProvider	An implementation of an OAuth2AuthorizedClientProvider for the refresh_token grant.
RefreshTokenReactiveOAuth2AuthorizedClientProvider	An implementation of a ReactiveOAuth2AuthorizedClientProvider for the refresh_token grant.
RegexBasedAxFetchListFactory	Deprecated. The OpenID 1.0 and 2.0 protocols have been deprecated and users are encouraged to migrate to OpenID Connect, which is supported by spring-security-oauth2.
RegExpAllowFromStrategy	Deprecated. ALLOW-FROM is an obsolete directive that no longer works in modern browsers.
RegexRequestMatcher	Uses a regular expression to decide whether a supplied the URL of a supplied HttpServletRequest.
RegisteredOAuth2AuthorizedClient	This annotation may be used to resolve a method parameter to an argument value of type OAuth2AuthorizedClient.
RegisterSessionAuthenticationStrategy	Strategy used to register a user with the SessionRegistry after successful Authentication.
RelyingPartyRegistration	Represents a configured relying party (aka Service Provider) and asserting party (aka Identity Provider) pair.
RelyingPartyRegistration.AssertingPartyDetails	The configuration metadata of the Asserting party
RelyingPartyRegistration.AssertingPartyDetails.Builder
RelyingPartyRegistration.Builder
RelyingPartyRegistration.ProviderDetails	Deprecated. Use RelyingPartyRegistration.AssertingPartyDetails instead
RelyingPartyRegistration.ProviderDetails.Builder	Deprecated. Use RelyingPartyRegistration.AssertingPartyDetails.Builder instead
RelyingPartyRegistrationRepository	A repository for RelyingPartyRegistrations
RelyingPartyRegistrationResolver	A contract for resolving a RelyingPartyRegistration from the HTTP request
RelyingPartyRegistrations	A utility class for constructing instances of RelyingPartyRegistration
RelyingPartyRegistrationsBeanDefinitionParser
RememberMeAuthenticationException	This exception is thrown when an Authentication exception occurs while using the remember-me authentication.
RememberMeAuthenticationFilter	Detects if there is no Authentication object in the SecurityContext, and populates the context with a remember-me authentication token if a RememberMeServices implementation so requests.
RememberMeAuthenticationProvider	An AuthenticationProvider implementation that validates RememberMeAuthenticationTokens.
RememberMeAuthenticationToken	Represents a remembered Authentication.
RememberMeConfigurer<H extends HttpSecurityBuilder<H>>	Configures Remember Me authentication.
RememberMeServices	Implement by a class that is capable of providing a remember-me service.
RemoteAuthenticationException	Deprecated. as of 5.6.0 with no replacement
RemoteAuthenticationManager	Deprecated. as of 5.6.0 with no replacement
RemoteAuthenticationManagerImpl	Deprecated. as of 5.6.0 with no replacement
RemoteAuthenticationProvider	Deprecated. as of 5.6.0 with no replacement
RemoveAuthorizedClientOAuth2AuthorizationFailureHandler	An OAuth2AuthorizationFailureHandler that removes an OAuth2AuthorizedClient when the OAuth2Error.getErrorCode() matches one of the configured OAuth 2.0 error codes.
RemoveAuthorizedClientOAuth2AuthorizationFailureHandler.OAuth2AuthorizedClientRemover	Removes an OAuth2AuthorizedClient from an OAuth2AuthorizedClientRepository or OAuth2AuthorizedClientService.
RemoveAuthorizedClientReactiveOAuth2AuthorizationFailureHandler	A ReactiveOAuth2AuthorizationFailureHandler that removes an OAuth2AuthorizedClient when the OAuth2Error.getErrorCode() matches one of the configured OAuth 2.0 error codes.
RemoveAuthorizedClientReactiveOAuth2AuthorizationFailureHandler.OAuth2AuthorizedClientRemover	Removes an OAuth2AuthorizedClient from a ServerOAuth2AuthorizedClientRepository or ReactiveOAuth2AuthorizedClientService.
RequestAttributeAuthenticationFilter	A simple pre-authenticated filter which obtains the username from request attributes, for use with SSO systems such as Stanford WebAuth or Shibboleth.
RequestAttributeSecurityContextRepository	Stores the SecurityContext on a ServletRequest.setAttribute(String, Object) so that it can be restored when different dispatch types occur.
RequestAuthorizationContext	An HttpServletRequest authorization context.
RequestCache	Implements "saved request" logic, allowing a single request to be retrieved and restarted after redirecting to an authentication mechanism.
RequestCacheAwareFilter	Responsible for reconstituting the saved request if one is cached and it matches the current request.
RequestCacheConfigurer<H extends HttpSecurityBuilder<H>>	Adds request cache for Spring Security.
RequestedUrlRedirectInvalidSessionStrategy	Performs a redirect to the original request URL when an invalid requested session is detected by the SessionManagementFilter.
RequestHeaderAuthenticationFilter	A simple pre-authenticated filter which obtains the username from a request header, for use with systems such as CA Siteminder.
RequestHeaderRequestMatcher	A RequestMatcher that can be used to match request that contain a header with an expected header name and an expected value.
RequestKey
RequestMatcher	Simple strategy to match an HttpServletRequest.
RequestMatcher.MatchResult	The result of matching against an HttpServletRequest Contains the status, true or false, of the match and if present, any variables extracted from the match
RequestMatcherDelegatingAccessDeniedHandler	An AccessDeniedHandler that delegates to other AccessDeniedHandler instances based upon the type of HttpServletRequest passed into RequestMatcherDelegatingAccessDeniedHandler.handle(HttpServletRequest, HttpServletResponse, AccessDeniedException).
RequestMatcherDelegatingAuthenticationManagerResolver	An AuthenticationManagerResolver that returns a AuthenticationManager instances based upon the type of HttpServletRequest passed into RequestMatcherDelegatingAuthenticationManagerResolver.resolve(HttpServletRequest).
RequestMatcherDelegatingAuthenticationManagerResolver.Builder	A builder for RequestMatcherDelegatingAuthenticationManagerResolver.
RequestMatcherDelegatingAuthorizationManager	An AuthorizationManager which delegates to a specific AuthorizationManager based on a RequestMatcher evaluation.
RequestMatcherDelegatingAuthorizationManager.Builder	A builder for RequestMatcherDelegatingAuthorizationManager.
RequestMatcherDelegatingWebInvocationPrivilegeEvaluator	A WebInvocationPrivilegeEvaluator which delegates to a list of WebInvocationPrivilegeEvaluator based on a RequestMatcher evaluation
RequestMatcherEditor	PropertyEditor which creates ELRequestMatcher instances from Strings This allows to use a String in a BeanDefinition instead of an (inner) bean if a RequestMatcher is required, e.g.
RequestMatcherEntry<T>	A rich object for associating a RequestMatcher to another object.
RequestMatcherRedirectFilter	Filter that redirects requests that match RequestMatcher to the specified URL.
RequestRejectedException
RequestRejectedHandler	Used by FilterChainProxy to handle an RequestRejectedException.
RequestVariablesExtractor	Deprecated. use RequestMatcher.MatchResult from RequestMatcher.matcher(HttpServletRequest)
RetryWithHttpEntryPoint	Commences an insecure channel by retrying the original request using HTTP.
RetryWithHttpsEntryPoint	Commences a secure channel by retrying the original request using HTTPS.
RoleHierarchy	The simple interface of a role hierarchy.
RoleHierarchyAuthoritiesMapper
RoleHierarchyImpl	This class defines a role hierarchy for use with various access checking components.
RoleHierarchyUtils	Utility methods for RoleHierarchy.
RoleHierarchyVoter	Extended RoleVoter which uses a RoleHierarchy definition to determine the roles allocated to the current user before voting.
RoleVoter	Votes if any ConfigAttribute.getAttribute() starts with a prefix indicating that it is a role.
RoutePayloadExchangeMatcher
RsaKeyConversionServicePostProcessor	Adds RsaKeyConverters to the configured ConversionService or PropertyEditors
RsaKeyConverters	Used for creating Key converter instances
RSocketSecurity	Allows configuring RSocket based security.
RunAsImplAuthenticationProvider	An AuthenticationProvider implementation that can authenticate a RunAsUserToken.
RunAsManager	Creates a new temporary Authentication object for the current secure object invocation only.
RunAsManagerImpl	Basic concrete implementation of a RunAsManager.
RunAsUserToken	An immutable Authentication implementation that supports RunAsManagerImpl.
Saml2AuthenticatedPrincipal	Saml2 representation of an AuthenticatedPrincipal.
Saml2Authentication	An implementation of an AbstractAuthenticationToken that represents an authenticated SAML 2.0 Authentication.
Saml2AuthenticationException	This exception is thrown for all SAML 2.0 related Authentication errors.
Saml2AuthenticationRequest	Deprecated. use Saml2AuthenticationRequestContext
Saml2AuthenticationRequest.Builder	A builder for Saml2AuthenticationRequest.
Saml2AuthenticationRequestContext	Deprecated. Use Saml2AuthenticationRequestResolver instead
Saml2AuthenticationRequestContext.Builder	A builder for Saml2AuthenticationRequestContext.
Saml2AuthenticationRequestContextResolver	Deprecated. Use Saml2AuthenticationRequestResolver instead
Saml2AuthenticationRequestFactory	Deprecated. As of 5.7.0, use Saml2AuthenticationRequestResolver instead
Saml2AuthenticationRequestRepository<T extends AbstractSaml2AuthenticationRequest>	A repository for AbstractSaml2AuthenticationRequest
Saml2AuthenticationRequestResolver	A strategy for resolving a SAML 2.0 Authentication Request from the HttpServletRequest.
Saml2AuthenticationToken	Represents an incoming SAML 2.0 response containing an assertion that has not been validated.
Saml2AuthenticationTokenConverter	An AuthenticationConverter that generates a Saml2AuthenticationToken appropriate for authenticated a SAML 2.0 Assertion against an AuthenticationManager.
Saml2Error	A representation of an SAML 2.0 Error.
Saml2Error	Deprecated. Use Saml2Error instead
Saml2ErrorCodes	A list of SAML known 2 error codes used during SAML authentication.
Saml2ErrorCodes	Deprecated. Use Saml2ErrorCodes instead
Saml2Exception
Saml2Jackson2Module	Jackson module for saml2-service-provider.
Saml2LoginConfigurer<B extends HttpSecurityBuilder<B>>	An AbstractHttpConfigurer for SAML 2.0 Login, which leverages the SAML 2.0 Web Browser Single Sign On (WebSSO) Flow.
Saml2LogoutConfigurer<H extends HttpSecurityBuilder<H>>	Adds SAML 2.0 logout support.
Saml2LogoutRequest	A class that represents a signed and serialized SAML 2.0 Logout Request
Saml2LogoutRequest.Builder
Saml2LogoutRequestFilter	A filter for handling logout requests in the form of a <saml2:LogoutRequest> sent from the asserting party.
Saml2LogoutRequestRepository	Implementations of this interface are responsible for the persistence of Saml2LogoutRequest between requests.
Saml2LogoutRequestResolver	Creates a signed SAML 2.0 Logout Request based on information from the HttpServletRequest and current Authentication.
Saml2LogoutRequestValidator	Validates SAML 2.0 Logout Requests
Saml2LogoutRequestValidatorParameters	A holder of the parameters needed to invoke Saml2LogoutRequestValidator
Saml2LogoutResponse	A class that represents a signed and serialized SAML 2.0 Logout Response
Saml2LogoutResponse.Builder
Saml2LogoutResponseFilter	A filter for handling a <saml2:LogoutResponse> sent from the asserting party.
Saml2LogoutResponseResolver	Creates a signed SAML 2.0 Logout Response based on information from the HttpServletRequest and current Authentication.
Saml2LogoutResponseValidator	Validates SAML 2.0 Logout Responses
Saml2LogoutResponseValidatorParameters	A holder of the parameters needed to invoke Saml2LogoutResponseValidator
Saml2LogoutValidatorResult	A result emitted from a SAML 2.0 Logout validation attempt
Saml2LogoutValidatorResult.Builder
Saml2MessageBinding	The type of bindings that messages are exchanged using Supported bindings are urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST and urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect.
Saml2MetadataFilter	A Filter that returns the metadata for a Relying Party
Saml2MetadataResolver	Resolves the SAML 2.0 Relying Party Metadata for a given RelyingPartyRegistration
Saml2ParameterNames	Standard parameter names defined in the SAML 2.0 Specification and used by the Authentication Request, Assertion Consumer Response, Logout Request, and Logout Response endpoints.
Saml2PostAuthenticationRequest	Data holder for information required to send an AuthNRequest over a POST binding from the service provider to the identity provider https://www.oasis-open.org/committees/download.php/35711/sstc-saml-core-errata-2.0-wd-06-diff.pdf (line 2031)
Saml2PostAuthenticationRequest.Builder	Builder class for a Saml2PostAuthenticationRequest object.
Saml2RedirectAuthenticationRequest	Data holder for information required to send an AuthNRequest over a REDIRECT binding from the service provider to the identity provider https://www.oasis-open.org/committees/download.php/35711/sstc-saml-core-errata-2.0-wd-06-diff.pdf (line 2031)
Saml2RedirectAuthenticationRequest.Builder	Builder class for a Saml2RedirectAuthenticationRequest object.
Saml2RelyingPartyInitiatedLogoutSuccessHandler	A success handler for issuing a SAML 2.0 Logout Request to the the SAML 2.0 Asserting Party
Saml2ResponseValidatorResult	A result emitted from a SAML 2.0 Response validation attempt
Saml2WebSsoAuthenticationFilter
Saml2WebSsoAuthenticationRequestFilter	This Filter formulates a SAML 2.0 AuthnRequest (line 1968) and redirects to a configured asserting party.
Saml2X509Credential	An object for holding a public certificate, any associated private key, and its intended usages (Line 584, Section 4.3 Credentials).
Saml2X509Credential	Deprecated. Use Saml2X509Credential instead
Saml2X509Credential.Saml2X509CredentialType
Saml2X509Credential.Saml2X509CredentialType	Deprecated. Use Saml2X509Credential.Saml2X509CredentialType instead
SamlServiceProperties	Sets the appropriate parameters for CAS's implementation of SAML (which is not guaranteed to be actually SAML compliant).
SaveContextOnUpdateOrErrorResponseWrapper	Deprecated. Use SecurityContextRepository.loadContext(HttpServletRequest) instead.
SavedCookie	Stores off the values of a cookie in a serializable holder
SavedRequest	Encapsulates the functionality required of a cached request for both an authentication mechanism (typically form-based login) to redirect to the original URL and for a RequestCache to build a wrapped request, reproducing the original request data.
SavedRequestAwareAuthenticationSuccessHandler	An authentication success strategy which can make use of the DefaultSavedRequest which may have been stored in the session by the ExceptionTranslationFilter.
SCryptPasswordEncoder	Implementation of PasswordEncoder that uses the SCrypt hashing function.
SecureChannelProcessor	Ensures channel security is active by review of HttpServletRequest.isSecure() responses.
Secured	Java 5 annotation for describing service layer security attributes.
SecuredAnnotationSecurityMetadataSource	Sources method security metadata from Spring Security's Secured annotation.
SecuredAuthorizationManager	An AuthorizationManager which can determine if an Authentication may invoke the MethodInvocation by evaluating if the Authentication contains a specified authority from the Spring Security's Secured annotation.
SecureRandomFactoryBean	Creates a SecureRandom instance.
SecurityBuilder<O>	Interface for building an Object
SecurityConfig	Stores a ConfigAttribute as a String.
SecurityConfigurer<O,B extends SecurityBuilder<O>>	Allows for configuring a SecurityBuilder.
SecurityConfigurerAdapter<O,B extends SecurityBuilder<O>>	A base class for SecurityConfigurer that allows subclasses to only implement the methods they are interested in.
SecurityContext	Interface defining the minimum security information associated with the current thread of execution.
SecurityContextCallableProcessingInterceptor	Allows for integration with Spring MVC's Callable support.
SecurityContextChangedEvent	An event that represents a change in SecurityContext
SecurityContextChangedListener	A listener for SecurityContextChangedEvents
SecurityContextChannelInterceptor	Creates a ExecutorChannelInterceptor that will obtain the Authentication from the specified Message.getHeaders().
SecurityContextConfigurer<H extends HttpSecurityBuilder<H>>	Allows persisting and restoring of the SecurityContext found on the SecurityContextHolder for each request by configuring the SecurityContextPersistenceFilter.
SecurityContextHolder	Associates a given SecurityContext with the current execution thread.
SecurityContextHolderAwareRequestFilter	A Filter which populates the ServletRequest with a request wrapper which implements the servlet API security methods.
SecurityContextHolderAwareRequestWrapper	A Spring Security-aware HttpServletRequestWrapper, which uses the SecurityContext-defined Authentication object to implement the servlet API security methods: SecurityContextHolderAwareRequestWrapper.getUserPrincipal() SecurityContextHolderAwareRequestWrapper.isUserInRole(String) HttpServletRequestWrapper.getRemoteUser().
SecurityContextHolderFilter	A Filter that uses the SecurityContextRepository to obtain the SecurityContext and set it on the SecurityContextHolder.
SecurityContextHolderStrategy	A strategy for storing security context information against a thread.
SecurityContextImpl	Base implementation of SecurityContext.
SecurityContextLoginModule	An implementation of LoginModule that uses a Spring Security SecurityContext to provide authentication.
SecurityContextLogoutHandler	Performs a logout by modifying the SecurityContextHolder.
SecurityContextPersistenceFilter	Deprecated. Use SecurityContextHolderFilter
SecurityContextRepository	Strategy used for persisting a SecurityContext between requests.
SecurityContextServerLogoutHandler	A ServerLogoutHandler which removes the SecurityContext using the provided ServerSecurityContextRepository
SecurityContextServerWebExchange	Overrides the ServerWebExchange.getPrincipal() with the provided SecurityContext
SecurityContextServerWebExchangeWebFilter	Override the ServerWebExchange.getPrincipal() to be looked up using ReactiveSecurityContextHolder.
SecurityDebugBeanFactoryPostProcessor
SecurityEvaluationContextExtension	By defining this object as a Bean, Spring Security is exposed as SpEL expressions for creating Spring Data queries.
SecurityExpressionHandler<T>	Facade which isolates Spring Security's requirements for evaluating security expressions from the implementation of the underlying expression objects
SecurityExpressionOperations	Standard interface for expression root objects used with expression-based security.
SecurityExpressionRoot	Base root object for use in Spring Security expression evaluations.
SecurityFilterChain	Defines a filter chain which is capable of being matched against an HttpServletRequest.
SecurityHeaders	Utilities for interacting with HttpHeaders
SecurityJackson2Modules	This utility class will find all the SecurityModules in classpath.
SecurityMetadataSource	Implemented by classes that store and can identify the ConfigAttributes that applies to a given secure object invocation.
SecurityMockMvcConfigurers	Provides Security related MockMvcConfigurer implementations.
SecurityMockMvcRequestBuilders	Contains Spring Security related MockMvc RequestBuilders.
SecurityMockMvcRequestBuilders.FormLoginRequestBuilder	Creates a form based login request including any necessary CsrfToken.
SecurityMockMvcRequestBuilders.LogoutRequestBuilder	Creates a logout request (including any necessary CsrfToken)
SecurityMockMvcRequestPostProcessors	Contains MockMvc RequestPostProcessor implementations for Spring Security.
SecurityMockMvcRequestPostProcessors.CsrfRequestPostProcessor	Populates a valid CsrfToken into the request.
SecurityMockMvcRequestPostProcessors.DigestRequestPostProcessor
SecurityMockMvcRequestPostProcessors.JwtRequestPostProcessor
SecurityMockMvcRequestPostProcessors.OAuth2ClientRequestPostProcessor
SecurityMockMvcRequestPostProcessors.OAuth2LoginRequestPostProcessor
SecurityMockMvcRequestPostProcessors.OidcLoginRequestPostProcessor
SecurityMockMvcRequestPostProcessors.OpaqueTokenRequestPostProcessor
SecurityMockMvcRequestPostProcessors.UserRequestPostProcessor	Creates a UsernamePasswordAuthenticationToken and sets the principal to be a User and associates it to the MockHttpServletRequest.
SecurityMockMvcResultHandlers	Security related MockMvc ResultHandlers
SecurityMockMvcResultMatchers	Security related MockMvc ResultMatchers.
SecurityMockMvcResultMatchers.AuthenticatedMatcher	A MockMvc ResultMatcher that verifies a specific user is associated to the MvcResult.
SecurityMockServerConfigurers	Test utilities for working with Spring Security and WebTestClient.Builder.apply(WebTestClientConfigurer).
SecurityMockServerConfigurers.CsrfMutator
SecurityMockServerConfigurers.JwtMutator	Updates the WebServerExchange using {@link SecurityMockServerConfigurers#mockAuthentication(Authentication)}.
SecurityMockServerConfigurers.OAuth2ClientMutator
SecurityMockServerConfigurers.OAuth2LoginMutator
SecurityMockServerConfigurers.OidcLoginMutator
SecurityMockServerConfigurers.OpaqueTokenMutator
SecurityMockServerConfigurers.UserExchangeMutator	Updates the WebServerExchange using {@link SecurityMockServerConfigurers#mockUser(UserDetails)}.
SecurityNamespaceHandler	Parses elements from the "security" namespace (http://www.springframework.org/schema/security).
SecuritySocketAcceptorInterceptor	A SocketAcceptorInterceptor that applies Security through a delegate SocketAcceptorInterceptor.
SecurityTestExecutionListeners	There are many times a user may want to use Spring Security's test support (i.e.
SecurityWebApplicationContextUtils	Spring Security extension to Spring's WebApplicationContextUtils.
SecurityWebFilterChain	Defines a filter chain which is capable of being matched against a ServerWebExchange in order to decide whether it applies to that request.
SecurityWebFiltersOrder
ServerAccessDeniedHandler
ServerAuthenticationConverter	A strategy used for converting from a ServerWebExchange to an Authentication used for authenticating with a provided ReactiveAuthenticationManager.
ServerAuthenticationEntryPoint	Used to request authentication
ServerAuthenticationEntryPointFailureHandler	Adapts a ServerAuthenticationEntryPoint into a ServerAuthenticationFailureHandler
ServerAuthenticationFailureHandler	Handles authentication failure
ServerAuthenticationSuccessHandler	Handles authentication success
ServerAuthorizationRequestRepository<T extends OAuth2AuthorizationRequest>	Implementations of this interface are responsible for the persistence of OAuth2AuthorizationRequest between requests.
ServerBearerExchangeFilterFunction	An ExchangeFilterFunction that adds the Bearer Token from an existing AbstractOAuth2Token tied to the current Authentication.
ServerBearerTokenAuthenticationConverter	A strategy for resolving Bearer Tokens from the ServerWebExchange.
ServerCsrfTokenRepository	An API to allow changing the method in which the expected CsrfToken is associated to the ServerWebExchange.
ServerFormLoginAuthenticationConverter	Converts a ServerWebExchange into a UsernamePasswordAuthenticationToken from the form data HTTP parameters.
ServerFormLoginAuthenticationConverter	Deprecated. use ServerFormLoginAuthenticationConverter instead.
ServerHttpBasicAuthenticationConverter	Converts from a ServerWebExchange to an Authentication that can be authenticated.
ServerHttpBasicAuthenticationConverter	Deprecated. Use ServerHttpBasicAuthenticationConverter instead.
ServerHttpHeadersWriter	Interface for writing headers just before the response is committed.
ServerHttpSecurity	A ServerHttpSecurity is similar to Spring Security's HttpSecurity but for WebFlux.
ServerLogoutHandler	Handles log out
ServerLogoutSuccessHandler	Strategy for when log out was successfully performed (typically after ServerLogoutHandler is invoked).
ServerOAuth2AuthorizationCodeAuthenticationTokenConverter	Converts from a ServerWebExchange to an OAuth2AuthorizationCodeAuthenticationToken that can be authenticated.
ServerOAuth2AuthorizationRequestResolver	Implementations of this interface are capable of resolving an OAuth2AuthorizationRequest from the provided ServerWebExchange.
ServerOAuth2AuthorizedClientExchangeFilterFunction	Provides an easy mechanism for using an OAuth2AuthorizedClient to make OAuth2 requests by including the token as a Bearer Token.
ServerOAuth2AuthorizedClientRepository	Implementations of this interface are responsible for the persistence of Authorized Client(s) between requests.
ServerRedirectStrategy	A strategy for performing redirects.
ServerRequestCache	Saves a ServerHttpRequest so it can be "replayed" later.
ServerRequestCacheWebFilter	A WebFilter that replays any matching request in ServerRequestCache
ServerSecurityContextRepository	Strategy used for persisting a SecurityContext between requests.
ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver	A ReactiveAuthenticationManagerResolver that returns a ReactiveAuthenticationManager instances based upon the type of ServerWebExchange passed into ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.resolve(ServerWebExchange).
ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.Builder	A builder for RequestMatcherDelegatingAuthenticationManagerResolver.
ServerWebExchangeDelegatingServerAccessDeniedHandler	A ServerAccessDeniedHandler which delegates to multiple ServerAccessDeniedHandlers based on a ServerWebExchangeMatcher
ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry
ServerWebExchangeDelegatingServerHttpHeadersWriter	Delegates to a provided ServerHttpHeadersWriter if ServerWebExchangeMatcher.matches(ServerWebExchange) returns a match.
ServerWebExchangeMatcher	An interface for determining if a ServerWebExchangeMatcher matches.
ServerWebExchangeMatcher.MatchResult	The result of matching
ServerWebExchangeMatcherEntry<T>	A rich object for associating a ServerWebExchangeMatcher to another object.
ServerWebExchangeMatchers	Provides factory methods for creating common ServerWebExchangeMatcher
ServerX509AuthenticationConverter	Converts from a SslInfo provided by a request to an PreAuthenticatedAuthenticationToken that can be authenticated.
ServiceAuthenticationDetails	In order for the CasAuthenticationProvider to provide the correct service url to authenticate the ticket, the returned value of Authentication.getDetails() should implement this interface when tickets can be sent to any URL rather than only ServiceProperties.getService().
ServiceAuthenticationDetailsSource	The AuthenticationDetailsSource that is set on the CasAuthenticationFilter should return a value that implements ServiceAuthenticationDetails if the application needs to authenticate dynamic service urls.
ServiceProperties	Stores properties related to this CAS service.
ServletApiConfigurer<H extends HttpSecurityBuilder<H>>	Implements select methods from the HttpServletRequest using the SecurityContext from the SecurityContextHolder.
ServletBearerExchangeFilterFunction	An ExchangeFilterFunction that adds the Bearer Token from an existing AbstractOAuth2Token tied to the current Authentication.
ServletOAuth2AuthorizedClientExchangeFilterFunction	Provides an easy mechanism for using an OAuth2AuthorizedClient to make OAuth 2.0 requests by including the access token as a bearer token.
SessionAuthenticationException	Thrown by an SessionAuthenticationStrategy to indicate that an authentication object is not valid for the current session, typically because the same user has exceeded the number of sessions they are allowed to have concurrently.
SessionAuthenticationStrategy	Allows pluggable support for HttpSession-related behaviour when an authentication occurs.
SessionCreationEvent	Generic session creation event which indicates that a session (potentially represented by a security context) has begun.
SessionCreationPolicy	Specifies the various session creation policies for Spring Security.
SessionDestroyedEvent	Generic "session termination" event which indicates that a session (potentially represented by a security context) has ended.
SessionFixationProtectionEvent	Indicates a session ID was changed for the purposes of session fixation protection.
SessionFixationProtectionStrategy	Uses HttpServletRequest.invalidate() to protect against session fixation attacks.
SessionIdChangedEvent	Generic "session ID changed" event which indicates that a session identifier (potentially represented by a security context) has changed.
SessionInformation	Represents a record of a session within the Spring Security framework.
SessionInformationExpiredEvent	An event for when a SessionInformation is expired.
SessionInformationExpiredStrategy	Determines the behaviour of the ConcurrentSessionFilter when an expired session is detected in the ConcurrentSessionFilter.
SessionManagementConfigurer<H extends HttpSecurityBuilder<H>>	Allows configuring session management.
SessionManagementFilter	Detects that a user has been authenticated since the start of the request and, if they have, calls the configured SessionAuthenticationStrategy to perform any session-related activity such as activating session-fixation protection mechanisms or checking for multiple concurrent logins.
SessionRegistry	Maintains a registry of SessionInformation instances.
SessionRegistryImpl	Default implementation of SessionRegistry which listens for SessionDestroyedEvents published in the Spring application context.
Sha512DigestUtils	Provides SHA512 digest methods.
Sid	A security identity recognised by the ACL system.
SidRetrievalStrategy	Strategy interface that provides an ability to determine the Sid instances applicable for an Authentication.
SidRetrievalStrategyImpl	Basic implementation of SidRetrievalStrategy that creates a Sid for the principal, as well as every granted authority the principal holds.
SignatureAlgorithm	An enumeration of the cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web Signature (JWS) to digitally sign the contents of the JWS Protected Header and JWS Payload.
SimpDestinationMessageMatcher	MessageMatcher which compares a pre-defined pattern against the destination of a Message.
SimpleAttributes2GrantedAuthoritiesMapper	This class implements the Attributes2GrantedAuthoritiesMapper interface by doing a one-to-one mapping from roles to Spring Security GrantedAuthorities.
SimpleAuthenticationEncoder	Encodes Simple Authentication.
SimpleAuthorityMapper	Simple one-to-one GrantedAuthoritiesMapper which allows for case conversion of the authority name and the addition of a string prefix (which defaults to ROLE_ ).
SimpleGrantedAuthority	Basic concrete implementation of a GrantedAuthority.
SimpleGrantedAuthorityMixin	Jackson Mixin class helps in serialize/deserialize SimpleGrantedAuthority.
SimpleMappableAttributesRetriever	This class implements the MappableAttributesRetriever interface by just returning a list of mappable attributes as previously set using the corresponding setter method.
SimpleMethodInvocation	Represents the AOP Alliance MethodInvocation.
SimpleRedirectInvalidSessionStrategy	Performs a redirect to a fixed URL when an invalid requested session is detected by the SessionManagementFilter.
SimpleRedirectSessionInformationExpiredStrategy	Performs a redirect to a fixed URL when an expired session is detected by the ConcurrentSessionFilter.
SimpleSavedRequest	A Bean implementation of SavedRequest
SimpleUrlAuthenticationFailureHandler	AuthenticationFailureHandler which performs a redirect to the value of the defaultFailureUrl property when the onAuthenticationFailure method is called.
SimpleUrlAuthenticationSuccessHandler	AuthenticationSuccessHandler which can be configured with a default URL which users should be sent to upon successful authentication.
SimpleUrlLogoutSuccessHandler	Handles the navigation on logout by delegating to the AbstractAuthenticationTargetUrlRequestHandler base class logic.
SimpMessageTypeMatcher	A MessageMatcher that matches if the provided Message has a type that is the same as the SimpMessageType that was specified in the constructor.
SpringAuthorizationEventPublisher	An implementation of AuthorizationEventPublisher that uses Spring's event publishing support.
SpringCacheBasedAclCache	Simple implementation of AclCache that delegates to Cache implementation.
SpringCacheBasedTicketCache	Caches tickets using a Spring IoC defined Cache.
SpringCacheBasedUserCache	Caches UserDetails instances in a Spring defined Cache.
SpringOpaqueTokenIntrospector	A Spring implementation of OpaqueTokenIntrospector that verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint.
SpringReactiveOpaqueTokenIntrospector	A Spring implementation of ReactiveOpaqueTokenIntrospector that verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint.
SpringSecurityAuthenticationSource	An AuthenticationSource to retrieve authentication information stored in Spring Security's SecurityContextHolder.
SpringSecurityCoreVersion	Internal class used for checking version compatibility in a deployed application.
SpringSecurityLdapTemplate	Extension of Spring LDAP's LdapTemplate class which adds extra functionality required by Spring Security.
SpringSecurityMessageSource	The default MessageSource used by Spring Security.
StandardClaimAccessor	A ClaimAccessor for the "Standard Claims" that can be returned either in the UserInfo Response or the ID Token.
StandardClaimNames	The names of the "Standard Claims" defined by the OpenID Connect Core 1.0 specification that can be returned either in the UserInfo Response or the ID Token.
StandardPasswordEncoder	Deprecated. Digest based password encoding is not considered secure.
StatelessTicketCache	Caches CAS service tickets and CAS proxy tickets for stateless connections.
StaticAllowFromStrategy	Deprecated. ALLOW-FROM is an obsolete directive that no longer works in modern browsers.
StaticHeadersWriter	HeaderWriter implementation which writes the same Header instance.
StaticServerHttpHeadersWriter	Allows specifying HttpHeaders that should be written to the response.
StaticServerHttpHeadersWriter.Builder
StrictHttpFirewall	A strict implementation of HttpFirewall that rejects any suspicious requests with a RequestRejectedException.
StrictTransportSecurityServerHttpHeadersWriter	Writes the Strict-Transport-Security if the request is secure.
StringKeyGenerator	A generator for unique string keys.
SubjectDnX509PrincipalExtractor	Obtains the principal from a certificate using a regular expression match against the Subject (as returned by a call to X509Certificate.getSubjectDN()).
SupplierJwtDecoder	A JwtDecoder that lazily initializes another JwtDecoder
SupplierReactiveJwtDecoder	A ReactiveJwtDecoder that lazily initializes another ReactiveJwtDecoder
SwitchUserAuthorityChanger	Allows subclasses to modify the GrantedAuthority list that will be assigned to the principal when they assume the identity of a different principal.
SwitchUserFilter	Switch User processing filter responsible for user context switching.
SwitchUserGrantedAuthority	Custom GrantedAuthority used by SwitchUserFilter
SwitchUserWebFilter	Switch User processing filter responsible for user context switching.
TagLibConfig	internal configuration class for taglibs.
TestExecutionEvent	Represents the events on the methods of TestExecutionListener
TestingAuthenticationProvider	An AuthenticationProvider implementation for the TestingAuthenticationToken.
TestingAuthenticationToken	An Authentication implementation that is designed for use whilst unit testing.
TestSecurityContextHolder	The TestSecurityContextHolder is very similar to SecurityContextHolder, but is necessary for testing.
TestSecurityContextHolderStrategyAdapter
TextEncryptor	Service interface for symmetric encryption of text strings.
TextEscapeUtils	Internal utility for escaping characters in HTML strings.
ThrowableAnalyzer	Handler for analyzing Throwable instances.
ThrowableCauseExtractor	Interface for handlers extracting the cause out of a specific Throwable type.
Token	A token issued by TokenService.
TokenBasedRememberMeServices	Identifies previously remembered users by a Base-64 encoded cookie.
TokenBasedRememberMeServices.RememberMeTokenAlgorithm
TokenService	Provides a mechanism to allocate and rebuild secure, randomised tokens.
Transient	A marker for Authentications that should never be stored across requests, for example a bearer token authentication
TransientSecurityContext	A SecurityContext that is annotated with @Transient and thus should never be stored across requests.
UnanimousBased	Simple concrete implementation of AccessDecisionManager that requires all voters to abstain or grant access.
UnAuthenticatedServerOAuth2AuthorizedClientRepository	Deprecated. Use AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager instead
UnboundIdContainer
UnloadedSidException	Thrown if an Acl cannot perform an operation because it only loaded a subset of Sids and the caller has requested details for an unloaded Sid .
UrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>	Adds URL based authorization using DefaultFilterInvocationSecurityMetadataSource.
UrlUtils	Provides static methods for composing URLs.
User	Models core user information retrieved by a UserDetailsService.
User.UserBuilder	Builds the user to be added.
UserAttribute	Used by InMemoryUserDetailsManager to temporarily store the attributes associated with a user.
UserAttributeEditor	Property editor that creates a UserAttribute from a comma separated list of values.
UserCache	Provides a cache of UserDetails objects.
UserDetails	Provides core user information.
UserDetailsAwareConfigurer<B extends ProviderManagerBuilder<B>,U extends UserDetailsService>	Base class that allows access to the UserDetailsService for using as a default value with AuthenticationManagerBuilder.
UserDetailsByNameServiceWrapper<T extends Authentication>	This implementation for AuthenticationUserDetailsService wraps a regular Spring Security UserDetailsService implementation, to retrieve a UserDetails object based on the user name contained in an Authentication object.
UserDetailsChecker	Called by classes which make use of a UserDetailsService to check the status of the loaded UserDetails object.
UserDetailsContextMapper	Operations to map a UserDetails object to and from a Spring LDAP DirContextOperations implementation.
UserDetailsManager	An extension of the UserDetailsService which provides the ability to create new users and update existing ones.
UserDetailsManagerConfigurer<B extends ProviderManagerBuilder<B>,C extends UserDetailsManagerConfigurer<B,C>>	Base class for populating an AuthenticationManagerBuilder with a UserDetailsManager.
UserDetailsManagerResourceFactoryBean	Constructs an InMemoryUserDetailsManager from a resource using UserDetailsResourceFactoryBean.
UserDetailsMapFactoryBean	Creates a Collection<UserDetails> from a @{code Map} in the format of
UserDetailsPasswordService	An API for changing a UserDetails password.
UserDetailsRepositoryReactiveAuthenticationManager	A ReactiveAuthenticationManager that uses a ReactiveUserDetailsService to validate the provided username and password.
UserDetailsResourceFactoryBean	Parses a Resource that is a Properties file in the format of: username=password[,enabled|disabled],roles...
UserDetailsService	Core interface which loads user-specific data.
UserDetailsServiceConfigurer<B extends ProviderManagerBuilder<B>,C extends UserDetailsServiceConfigurer<B,C,U>,U extends UserDetailsService>	Allows configuring a UserDetailsService within a AuthenticationManagerBuilder.
UserDetailsServiceFactoryBean	Bean used to lookup a named UserDetailsService or AuthenticationUserDetailsService.
UserDetailsServiceLdapAuthoritiesPopulator	Simple LdapAuthoritiesPopulator which delegates to a UserDetailsService, using the name which was supplied at login as the username.
UsernameNotFoundException	Thrown if an UserDetailsService implementation cannot locate a User by its username.
UsernamePasswordAuthenticationFilter	Processes an authentication form submission.
UsernamePasswordAuthenticationToken	An Authentication implementation that is designed for simple presentation of a username and password.
UsernamePasswordMetadata	Represents a username and password that have been encoded into a Payload.metadata().
UserServiceBeanDefinitionParser
Utf8	UTF-8 Charset encoder/decoder.
WebAsyncManagerIntegrationFilter	Provides integration between the SecurityContext and Spring Web's WebAsyncManager by using the SecurityContextCallableProcessingInterceptor.beforeConcurrentHandling(org.springframework.web.context.request.NativeWebRequest, Callable) to populate the SecurityContext on the Callable.
WebAttributes	Well-known keys which are used to store Spring Security information in request or session scope.
WebAuthenticationDetails	A holder of selected HTTP details related to a web authentication request.
WebAuthenticationDetailsSource	Implementation of AuthenticationDetailsSource which builds the details object from an HttpServletRequest object, creating a WebAuthenticationDetails .
WebClientReactiveAuthorizationCodeTokenResponseClient	An implementation of a ReactiveOAuth2AccessTokenResponseClient that "exchanges" an authorization code credential for an access token credential at the Authorization Server's Token Endpoint.
WebClientReactiveClientCredentialsTokenResponseClient	An implementation of a ReactiveOAuth2AccessTokenResponseClient that "exchanges" a client credential for an access token credential at the Authorization Server's Token Endpoint.
WebClientReactiveJwtBearerTokenResponseClient	The default implementation of an ReactiveOAuth2AccessTokenResponseClient for the jwt-bearer grant.
WebClientReactivePasswordTokenResponseClient	Deprecated. The latest OAuth 2.0 Security Best Current Practice disallows the use of the Resource Owner Password Credentials grant.
WebClientReactiveRefreshTokenTokenResponseClient	An implementation of a ReactiveOAuth2AccessTokenResponseClient for the refresh_token grant.
WebExpressionAuthorizationManager	An expression-based AuthorizationManager that determines the access by evaluating the provided expression.
WebExpressionVoter	Voter which handles web authorisation decisions.
WebFilterChainProxy	Used to delegate to a List of SecurityWebFilterChain instances.
WebFilterChainServerAuthenticationSuccessHandler	Success handler that continues the filter chain after authentication success.
WebFilterExchange	A composite of the ServerWebExchange and the WebFilterChain.
WebInvocationPrivilegeEvaluator	Allows users to determine whether they have privileges for a given web URI.
WebJackson2Module	Jackson module for spring-security-web.
WebMvcSecurityConfiguration	Deprecated. This is applied internally using SpringWebMvcImportSelector
WebSecurity	The WebSecurity is created by WebSecurityConfiguration to create the FilterChainProxy known as the Spring Security Filter Chain (springSecurityFilterChain).
WebSecurityConfiguration	Uses a WebSecurity to create the FilterChainProxy that performs the web based security for Spring Security.
WebSecurityConfigurer<T extends SecurityBuilder<javax.servlet.Filter>>	Allows customization to the WebSecurity.
WebSecurityConfigurerAdapter	Deprecated. Use a SecurityFilterChain Bean to configure HttpSecurity or a WebSecurityCustomizer Bean to configure WebSecurity
WebSecurityCustomizer	Callback interface for customizing WebSecurity.
WebSecurityExpressionRoot
WebServerJackson2Module	Jackson module for spring-security-web-flux.
WebServletJackson2Module	Jackson module for spring-security-web related to servlet.
WebSessionOAuth2ServerAuthorizationRequestRepository	An implementation of an ServerAuthorizationRequestRepository that stores OAuth2AuthorizationRequest in the WebSession.
WebSessionServerCsrfTokenRepository	A ServerCsrfTokenRepository that stores the CsrfToken in the HttpSession.
WebSessionServerLogoutHandler	A ServerLogoutHandler which invalidates the active WebSession.
WebSessionServerOAuth2AuthorizedClientRepository	An implementation of an OAuth2AuthorizedClientRepository that stores OAuth2AuthorizedClient's in the HttpSession.
WebSessionServerRequestCache	An implementation of ServerRequestCache that saves the ServerHttpRequest in the WebSession.
WebSessionServerSecurityContextRepository	Stores the SecurityContext in the WebSession.
WebSocketMessageBrokerSecurityBeanDefinitionParser	Parses Spring Security's websocket namespace support.
WebSpherePreAuthenticatedProcessingFilter	This AbstractPreAuthenticatedProcessingFilter implementation is based on WebSphere authentication.
WebSpherePreAuthenticatedWebAuthenticationDetailsSource	This AuthenticationDetailsSource implementation will set the pre-authenticated granted authorities based on the WebSphere groups for the current WebSphere user, mapped using the configured Attributes2GrantedAuthoritiesMapper.
WebTestUtils	A utility class for testing spring security
WebXmlMappableAttributesRetriever	This MappableAttributesRetriever implementation reads the list of defined J2EE roles from a web.xml file and returns these from { WebXmlMappableAttributesRetriever.getMappableAttributes().
WellKnownChangePasswordBeanDefinitionParser	The bean definition parser for a Well-Known URL for Changing Passwords.
WhiteListedAllowFromStrategy	Deprecated. ALLOW-FROM is an obsolete directive that no longer works in modern browsers.
WithAnonymousUser	When used with WithSecurityContextTestExecutionListener this annotation can be added to a test method to emulate running with an anonymous user.
WithMockUser	When used with WithSecurityContextTestExecutionListener this annotation can be added to a test method to emulate running with a mocked user.
WithSecurityContext	An annotation to determine what SecurityContext to use.
WithSecurityContextFactory<A extends java.lang.annotation.Annotation>	An API that works with WithUserTestExcecutionListener for creating a SecurityContext that is populated in the TestSecurityContextHolder.
WithSecurityContextTestExecutionListener	A TestExecutionListener that will find annotations that are annotated with WithSecurityContext on a test method or at the class level.
WithUserDetails	When used with WithSecurityContextTestExecutionListener this annotation can be added to a test method to emulate running with a UserDetails returned from the UserDetailsService.
X509AuthenticationFilter
X509Configurer<H extends HttpSecurityBuilder<H>>	Adds X509 based pre authentication to an application.
X509PrincipalExtractor	Obtains the principal from an X509Certificate for use within the framework.
XContentTypeOptionsHeaderWriter	A StaticHeadersWriter that inserts headers to prevent content sniffing.
XContentTypeOptionsServerHttpHeadersWriter	Adds X-Content-Type-Options: nosniff
XFrameOptionsHeaderWriter	HeaderWriter implementation for the X-Frame-Options headers.
XFrameOptionsHeaderWriter.XFrameOptionsMode	The possible values for the X-Frame-Options header.
XFrameOptionsServerHttpHeadersWriter	ServerHttpHeadersWriter implementation for the X-Frame-Options headers.
XFrameOptionsServerHttpHeadersWriter.Mode	The X-Frame-Options values.
XXssProtectionHeaderWriter	Renders the X-XSS-Protection header.
XXssProtectionServerHttpHeadersWriter	Add the x-xss-protection header.