WebExpressionAuthorizationManager (spring-security-docs 5.8.12 API)

java.lang.Object
- org.springframework.security.web.access.expression.WebExpressionAuthorizationManager

All Implemented Interfaces:

AuthorizationManager<RequestAuthorizationContext>
```
public final class WebExpressionAuthorizationManager
extends java.lang.Object
implements AuthorizationManager<RequestAuthorizationContext>
```
An expression-based AuthorizationManager that determines the access by evaluating the provided expression.

Since:

5.8

Constructor Summary

Constructors
Constructor Description

WebExpressionAuthorizationManager(java.lang.String expressionString)
Creates an instance.

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`AuthorizationDecision`	`check(java.util.function.Supplier<Authentication> authentication, RequestAuthorizationContext context)`	Determines the access by evaluating the provided expression.
`void`	`setExpressionHandler(SecurityExpressionHandler<RequestAuthorizationContext> expressionHandler)`	Sets the `SecurityExpressionHandler` to be used.
`java.lang.String`	`toString()`

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.AuthorizationManager
verify

- Constructor Detail
  - WebExpressionAuthorizationManager
```
public WebExpressionAuthorizationManager(java.lang.String expressionString)
```
    Creates an instance.
    
    Parameters:
    
    expressionString - the raw expression string to parse
- Method Detail
  - setExpressionHandler
```
public void setExpressionHandler(SecurityExpressionHandler<RequestAuthorizationContext> expressionHandler)
```
    Sets the SecurityExpressionHandler to be used. The default is DefaultHttpSecurityExpressionHandler.
    
    Parameters:
    
    expressionHandler - the SecurityExpressionHandler to use
  - check
```
public AuthorizationDecision check(java.util.function.Supplier<Authentication> authentication,
                                   RequestAuthorizationContext context)
```
    Determines the access by evaluating the provided expression.
    
    Specified by:
    
    check in interface AuthorizationManager<RequestAuthorizationContext>
    
    Parameters:
    
    authentication - the Supplier of the Authentication to check
    
    context - the RequestAuthorizationContext to check
    
    Returns:
    
    an ExpressionAuthorizationDecision based on the evaluated expression
  - toString
```
public java.lang.String toString()
```
    Overrides:
    
    toString in class java.lang.Object