Package org.springframework.security.config.annotation.web.configurers

Class AuthorizeHttpRequestsConfigurer.AuthorizedUrl

java.lang.Object

org.springframework.security.config.annotation.web.configurers.AuthorizeHttpRequestsConfigurer.AuthorizedUrl

Direct Known Subclasses:

AuthorizeHttpRequestsConfigurer.MvcMatchersAuthorizedUrl

Enclosing class:

AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>

public class AuthorizeHttpRequestsConfigurer.AuthorizedUrl
extends Object

An object that allows configuring the AuthorizationManager for RequestMatchers.

Method Summary

Modifier and Type	Method	Description
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	access(AuthorizationManager<RequestAuthorizationContext> manager)	Allows specifying a custom AuthorizationManager.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	authenticated()	Specify that URLs are allowed by any authenticated user.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	denyAll()	Specify that URLs are not allowed by anyone.
protected List<? extends RequestMatcher>	getMatchers()
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	hasAnyAuthority(String... authorities)	Specifies that a user requires one of many authorities.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	hasAnyRole(String... roles)	Specifies that a user requires one of many roles.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	hasAuthority(String authority)	Specifies a user requires an authority.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	hasRole(String role)	Specifies a user requires a role.
AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry	permitAll()	Specify that URLs are allowed by anyone.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

getMatchers

protected List<? extends RequestMatcher> getMatchers()

permitAll

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry permitAll()

Specify that URLs are allowed by anyone.

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

denyAll

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry denyAll()

Specify that URLs are not allowed by anyone.

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

hasRole

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry hasRole(String role)

Specifies a user requires a role.

Parameters:

role - the role that should be required which is prepended with ROLE_ automatically (i.e. USER, ADMIN, etc). It should not start with ROLE_

Returns:

AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

hasAnyRole

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry hasAnyRole(String... roles)

Specifies that a user requires one of many roles.

Parameters:

roles - the roles that the user should have at least one of (i.e. ADMIN, USER, etc). Each role should not start with ROLE_ since it is automatically prepended already

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

hasAuthority

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry hasAuthority(String authority)

Specifies a user requires an authority.

Parameters:

authority - the authority that should be required

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

hasAnyAuthority

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry hasAnyAuthority(String... authorities)

Specifies that a user requires one of many authorities.

Parameters:

authorities - the authorities that the user should have at least one of (i.e. ROLE_USER, ROLE_ADMIN, etc)

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

authenticated

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry authenticated()

Specify that URLs are allowed by any authenticated user.

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations

access

public AuthorizeHttpRequestsConfigurer<H>.AuthorizationManagerRequestMatcherRegistry access(AuthorizationManager<RequestAuthorizationContext> manager)

Allows specifying a custom AuthorizationManager.

Parameters:

manager - the AuthorizationManager to use

Returns:

the AuthorizeHttpRequestsConfigurer<H extends HttpSecurityBuilder<H>>.AuthorizationManagerRequestMatcherRegistry for further customizations