Package org.springframework.security.authorization
@NullMarked
package org.springframework.security.authorization
-
ClassDescriptionAn
AuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains all the specified authorities.AReactiveAuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains all the specified authorities.AnAuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains aFactorGrantedAuthoritythat is not expired for eachRequiredFactor.A builder forAllRequiredFactorsAuthorizationManager.AnAuthorizationManagerthat determines if the current user is authenticated.AReactiveAuthorizationManagerthat determines if the current user is authenticated.AnAuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains any of the specified authorities.Represents anAuthorizationDecisionbased on a collection of authoritiesAnAuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains a specified authority.AReactiveAuthorizationManagerthat determines if the current user is authorized by evaluating if theAuthenticationcontains a specified authority.AnAccessDeniedExceptionthat contains theAuthorizationResultA contract for publishing authorization eventsAuthorizationManager<T extends @Nullable Object>An Authorization manager which can determine if anAuthenticationhas access to a specific object.Creates commonAuthorizationManagerFactoryinstances.A builder that allows creatingDefaultAuthorizationManagerFactorywith additional requirements forRequiredFactors.AuthorizationManagerFactory<T extends @Nullable Object>A factory for creating different kinds ofAuthorizationManagerinstances.A factory class to create anAuthorizationManagerinstances.AnObservation.Contextused during authorizationsAnObservationConventionfor translating authorizations intoKeyValues.A factory for wrapping arbitrary objects in authorization-related adviceRepresents an authorization resultDefaultAuthorizationManagerFactory<T extends @Nullable Object>A factory for creating different kinds ofAuthorizationManagerinstances.Represents anAuthorizationDecisionbased on aExpressionAnAuthorizationResultthat containsRequiredFactorError.AMapbased implementation ofRequiredAuthoritiesRepository.AnAuthorizationManagerthat observes the authorizationAnReactiveAuthorizationManagerthat observes the authenticationA reactive authorization manager which can determine if anAuthenticationhas access to a specific object.AnAuthorizationManagerthat requires all the authorities returned by aRequiredAuthoritiesRepositoryimplementation.Finds additional required authorities for the providedPrincipal.getName()The requirements for anGrantedAuthorityto be considered a valid factor.A builder forRequiredFactor.An error when the requirements ofRequiredFactorare not met.AnAuthorizationManagerwhich creates permit-all and deny-allAuthorizationManagerinstances.An implementation ofAuthorizationEventPublisherthat uses Spring's event publishing support.