Class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>>
- java.lang.Object
-
- org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>
-
- org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<C,H>
-
- org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer<ExpressionUrlAuthorizationConfigurer<H>,H>
-
- org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer<H>
-
- Type Parameters:
H
- the type ofHttpSecurityBuilder
that is being configured
- All Implemented Interfaces:
SecurityConfigurer<DefaultSecurityFilterChain,H>
@Deprecated public final class ExpressionUrlAuthorizationConfigurer<H extends HttpSecurityBuilder<H>> extends AbstractInterceptUrlConfigurer<ExpressionUrlAuthorizationConfigurer<H>,H>
Deprecated.UseAuthorizeHttpRequestsConfigurer
insteadAdds URL based authorization based upon SpEL expressions to an application. At least oneRequestMapping
needs to be mapped toConfigAttribute
's for thisSecurityContextConfigurer
to have meaning.Security Filters
The following Filters are populatedShared Objects Created
The following shared objects are populated to allow otherSecurityConfigurer
's to customize:Shared Objects Used
AuthenticationTrustResolver
is optionally used to populate theDefaultWebSecurityExpressionHandler
- Since:
- 3.2
- See Also:
HttpSecurity.authorizeRequests()
-
-
Nested Class Summary
Nested Classes Modifier and Type Class Description class
ExpressionUrlAuthorizationConfigurer.AuthorizedUrl
Deprecated.class
ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
Deprecated.class
ExpressionUrlAuthorizationConfigurer.MvcMatchersAuthorizedUrl
Deprecated.AnExpressionUrlAuthorizationConfigurer.AuthorizedUrl
that allows optionally configuring theMvcRequestMatcher.setMethod(HttpMethod)
-
Nested classes/interfaces inherited from class org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer
AbstractInterceptUrlConfigurer.AbstractInterceptUrlRegistry<R extends AbstractInterceptUrlConfigurer.AbstractInterceptUrlRegistry<R,T>,T>
-
-
Constructor Summary
Constructors Constructor Description ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Deprecated.Creates a new instance
-
Method Summary
All Methods Instance Methods Concrete Methods Deprecated Methods Modifier and Type Method Description ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry
getRegistry()
Deprecated.-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractInterceptUrlConfigurer
configure
-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, getSecurityContextHolderStrategy, withObjectPostProcessor
-
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
-
-
-
Constructor Detail
-
ExpressionUrlAuthorizationConfigurer
public ExpressionUrlAuthorizationConfigurer(org.springframework.context.ApplicationContext context)
Deprecated.Creates a new instance- See Also:
HttpSecurity.authorizeRequests()
-
-
Method Detail
-
getRegistry
public ExpressionUrlAuthorizationConfigurer.ExpressionInterceptUrlRegistry getRegistry()
Deprecated.
-
-