Package org.springframework.security.access.prepost
package org.springframework.security.access.prepost
Contains the infrastructure classes for handling the
@PreAuthorize
,
@PreFilter
, @PostAuthorize
and @PostFilter
annotations.
Other than the annotations themselves, the classes should be regarded as for internal framework use and are liable to change without notice.
-
ClassDescriptionAnnotation for specifying a method access-control expression which will be evaluated after a method has been invoked.Annotation for specifying a method filtering expression which will be evaluated after a method has been invoked.AfterInvocationProvider which delegates to a
PostInvocationAuthorizationAdvice
instance passing it the PostInvocationAttribute created from @PostAuthorize and @PostFilter annotations.Marker interface for attributes which are created from combined @PostFilter and @PostAuthorize annotations.Performs filtering and authorization logic after a method is invoked.Annotation for specifying a method access-control expression which will be evaluated to decide whether a method invocation is allowed or not.Annotation for specifying a method filtering expression which will be evaluated before a method has been invoked.Marker interface for attributes which are created from combined @PreFilter and @PreAuthorize annotations.Performs argument filtering and authorization logic before a method is invoked.Voter which performs the actions using a PreInvocationAuthorizationAdvice implementation generated from @PreFilter and @PreAuthorize annotations.AMethodInterceptor
that supportsPreAuthorize
andPostAuthorize
for methods that returnMono
orFlux
and Kotlin coroutine functions.MethodSecurityMetadataSource which extracts metadata from the @PreFilter and @PreAuthorize annotations placed on a method.