Package org.springframework.security.authorization

Class ObservationReactiveAuthorizationManager<T>

java.lang.Object

org.springframework.security.authorization.ObservationReactiveAuthorizationManager<T>

All Implemented Interfaces:

MethodAuthorizationDeniedHandler, ReactiveAuthorizationManager<T>

public final class ObservationReactiveAuthorizationManager<T>
extends Object
implements ReactiveAuthorizationManager<T>, MethodAuthorizationDeniedHandler

An ReactiveAuthorizationManager that observes the authentication

Since:

6.0

Constructor Summary

Constructors

Constructor	Description
ObservationReactiveAuthorizationManager(io.micrometer.observation.ObservationRegistry registry, ReactiveAuthorizationManager<T> delegate)

Method Summary

Modifier and Type	Method	Description
reactor.core.publisher.Mono<AuthorizationResult>	authorize(reactor.core.publisher.Mono<Authentication> authentication, T object)	Determines if access is granted for a specific authentication and object.
@Nullable Object	handleDeniedInvocation(org.aopalliance.intercept.MethodInvocation methodInvocation, AuthorizationResult authorizationResult)	Handle denied method invocations, implementations might either throw an AuthorizationDeniedException or a replacement result instead of invoking the method, e.g.
@Nullable Object	handleDeniedInvocationResult(MethodInvocationResult methodInvocationResult, AuthorizationResult authorizationResult)	Handle denied method invocations, implementations might either throw an AuthorizationDeniedException or a replacement result instead of invoking the method, e.g.
void	setObservationConvention(io.micrometer.observation.ObservationConvention<AuthorizationObservationContext<?>> convention)	Use the provided convention for reporting observation data

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.ReactiveAuthorizationManager

verify

Constructor Details

ObservationReactiveAuthorizationManager

public ObservationReactiveAuthorizationManager(io.micrometer.observation.ObservationRegistry registry,
 ReactiveAuthorizationManager<T> delegate)

Method Details

authorize

public reactor.core.publisher.Mono<AuthorizationResult> authorize(reactor.core.publisher.Mono<Authentication> authentication,
 T object)

Description copied from interface: ReactiveAuthorizationManager

Determines if access is granted for a specific authentication and object.

Specified by:

authorize in interface ReactiveAuthorizationManager<T>

Parameters:

authentication - the Authentication to authorize

object - the object to check

Returns:

an decision or empty Mono if no decision could be made.

setObservationConvention

public void setObservationConvention(io.micrometer.observation.ObservationConvention<AuthorizationObservationContext<?>> convention)

Use the provided convention for reporting observation data

Parameters:

convention - The provided convention

Since:

6.1

handleDeniedInvocation

public @Nullable Object handleDeniedInvocation(org.aopalliance.intercept.MethodInvocation methodInvocation,
 AuthorizationResult authorizationResult)

Description copied from interface: MethodAuthorizationDeniedHandler

Handle denied method invocations, implementations might either throw an AuthorizationDeniedException or a replacement result instead of invoking the method, e.g. a masked value.

Specified by:

handleDeniedInvocation in interface MethodAuthorizationDeniedHandler

Parameters:

methodInvocation - the MethodInvocation related to the authorization denied

authorizationResult - the authorization denied result

Returns:

a replacement result for the denied method invocation, or null, or a Mono for reactive applications

handleDeniedInvocationResult

public @Nullable Object handleDeniedInvocationResult(MethodInvocationResult methodInvocationResult,
 AuthorizationResult authorizationResult)

Description copied from interface: MethodAuthorizationDeniedHandler

Handle denied method invocations, implementations might either throw an AuthorizationDeniedException or a replacement result instead of invoking the method, e.g. a masked value. By default, this method invokes MethodAuthorizationDeniedHandler.handleDeniedInvocation(MethodInvocation, AuthorizationResult).

Specified by:

handleDeniedInvocationResult in interface MethodAuthorizationDeniedHandler

Parameters:

methodInvocationResult - the object containing the MethodInvocation and the result produced

authorizationResult - the authorization denied result

Returns:

a replacement result for the denied method invocation, or null, or a Mono for reactive applications