Package org.springframework.security.authorization.method
package org.springframework.security.authorization.method
-
ClassDescriptionAn interface that indicates method security adviceA proxy factory for applying authorization advice to an arbitrary object.An interface to handle how the
AuthorizationAdvisorProxyFactoryshould step through the target's object hierarchy.Ordering of Spring Security's authorizationAdvisorsAMethodInterceptorwhich can determine if anAuthenticationhas access to the result of anMethodInvocationusing anAuthorizationManagerAMethodInterceptorwhich can determine if anAuthenticationhas access to the returned object from theMethodInvocationusing the configuredReactiveAuthorizationManager.AMethodInterceptorwhich uses aAuthorizationManagerto determine if anAuthenticationmay invoke the givenMethodInvocationAMethodInterceptorwhich can determine if anAuthenticationhas access to theMethodInvocationusing the configuredReactiveAuthorizationManager.Wraps Spring Security method authorization advice around the return object of any method this annotation is applied to.A method interceptor that applies the givenAuthorizationProxyFactoryto any return value annotated withAuthorizeReturnObjectDeprecated.Annotation for specifying handling behavior when an authorization denied happens in method security or anAuthorizationDeniedExceptionis thrown during method invocationAnAuthorizationManagerwhich can determine if anAuthenticationmay invoke theMethodInvocationby evaluating if theAuthenticationcontains a specified authority from the JSR-250 security annotations.An interface used to define a strategy to handle denied method invocationsAn expression-basedAuthorizationManagerthat determines the access by evaluating the provided expression against theMethodInvocation.A context object that contains aMethodInvocationand the result of thatMethodInvocation.AnAuthorizationManagerwhich can determine if anAuthenticationmay return the result from an invokedMethodInvocationby evaluating an expression from thePostAuthorizeannotation.AReactiveAuthorizationManagerwhich can determine if anAuthenticationhas access to the returned object from theMethodInvocationby evaluating an expression from thePostAuthorizeannotation.AMethodInterceptorwhich filters areturnedObjectfrom theMethodInvocationby evaluating an expression from thePostFilterannotation.AMethodInterceptorwhich filters the returned object from theMethodInvocationby evaluating an expression from thePostFilterannotation.AnAuthorizationManagerwhich can determine if anAuthenticationmay invoke theMethodInvocationby evaluating an expression from thePreAuthorizeannotation.AReactiveAuthorizationManagerwhich can determine if anAuthenticationhas access to theMethodInvocationby evaluating an expression from thePreAuthorizeannotation.AMethodInterceptorwhich filters a method argument by evaluating an expression from thePreFilterannotation.AMethodInterceptorwhich filters a reactive method argument by evaluating an expression from thePreFilterannotation.A component for configuring various cross-cutting aspects of pre/post method securityAnAuthorizationManagerwhich can determine if anAuthenticationmay invoke theMethodInvocationby evaluating if theAuthenticationcontains a specified authority from the Spring Security'sSecuredannotation.An implementation ofMethodAuthorizationDeniedHandlerthat throwsAuthorizationDeniedException
ExpressionAuthorizationDecisioninstead