Index

A B C D E F G H I L M N O P R S T W X
All Classes and Interfaces|All Packages

A

AbstractMessageMatcherComposite<T> - Class in org.springframework.security.messaging.util.matcher

Abstract MessageMatcher containing multiple MessageMatcher

access(AuthorizationManager<MessageAuthorizationContext<?>>) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Allows specifying that Messages are secured by an arbitrary expression

afterHandshake(ServerHttpRequest, ServerHttpResponse, WebSocketHandler, Exception) - Method in class org.springframework.security.messaging.web.socket.server.CsrfTokenHandshakeInterceptor

afterMessageHandled(Message<?>, MessageChannel, MessageHandler, Exception) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

afterMessageHandled(Message<?>, MessageChannel, MessageHandler, Exception) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

afterSendCompletion(Message<?>, MessageChannel, boolean, Exception) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

AndMessageMatcher<T> - Class in org.springframework.security.messaging.util.matcher

MessageMatcher that will return true if all of the passed in MessageMatcher instances match.

AndMessageMatcher(List<MessageMatcher<T>>) - Constructor for class org.springframework.security.messaging.util.matcher.AndMessageMatcher

Creates a new instance

AndMessageMatcher(MessageMatcher<T>...) - Constructor for class org.springframework.security.messaging.util.matcher.AndMessageMatcher

Creates a new instance

anonymous() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are allowed by anonymous users.

ANY_MESSAGE - Static variable in interface org.springframework.security.messaging.util.matcher.MessageMatcher

Matches every Message

anyMessage() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps any Message to a security expression.

authenticated() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are allowed by any authenticated user.

AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.messaging.context

Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.

AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.messaging.handler.invocation.reactive

Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.

AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.messaging.context.AuthenticationPrincipalArgumentResolver

AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

AuthorizationChannelInterceptor - Class in org.springframework.security.messaging.access.intercept

Authorizes Message resources using the provided AuthorizationManager

AuthorizationChannelInterceptor(AuthorizationManager<Message<?>>) - Constructor for class org.springframework.security.messaging.access.intercept.AuthorizationChannelInterceptor

Creates a new instance

authorize(Supplier<? extends Authentication>, Message<?>) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager

B

beforeHandle(Message<?>, MessageChannel, MessageHandler) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

beforeHandle(Message<?>, MessageChannel, MessageHandler) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

beforeHandshake(ServerHttpRequest, ServerHttpResponse, WebSocketHandler, Map<String, Object>) - Method in class org.springframework.security.messaging.web.socket.server.CsrfTokenHandshakeInterceptor

build() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

builder() - Static method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager

Creates a builder for MessageMatcherDelegatingAuthorizationManager.

Builder() - Constructor for class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

C

createEvaluationContext(Authentication, MessageAuthorizationContext<?>) - Method in class org.springframework.security.messaging.access.expression.MessageAuthorizationContextSecurityExpressionHandler

createEvaluationContext(Supplier<? extends Authentication>, Message<T>) - Method in class org.springframework.security.messaging.access.expression.DefaultMessageSecurityExpressionHandler

createEvaluationContext(Supplier<? extends Authentication>, MessageAuthorizationContext<?>) - Method in class org.springframework.security.messaging.access.expression.MessageAuthorizationContextSecurityExpressionHandler

createSecurityExpressionRoot(Authentication, Message<T>) - Method in class org.springframework.security.messaging.access.expression.DefaultMessageSecurityExpressionHandler

CsrfChannelInterceptor - Class in org.springframework.security.messaging.web.csrf

ChannelInterceptor that validates that a valid CSRF is included in the header of any SimpMessageType.CONNECT message.

CsrfChannelInterceptor() - Constructor for class org.springframework.security.messaging.web.csrf.CsrfChannelInterceptor

CsrfTokenHandshakeInterceptor - Class in org.springframework.security.messaging.web.socket.server

Loads a CsrfToken from the HttpServletRequest and HttpServletResponse to populate the WebSocket attributes.

CsrfTokenHandshakeInterceptor() - Constructor for class org.springframework.security.messaging.web.socket.server.CsrfTokenHandshakeInterceptor

CurrentSecurityContextArgumentResolver - Class in org.springframework.security.messaging.handler.invocation.reactive

Allows resolving the Authentication.getPrincipal() using the CurrentSecurityContext annotation.

CurrentSecurityContextArgumentResolver() - Constructor for class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

D

DefaultMessageSecurityExpressionHandler<T> - Class in org.springframework.security.messaging.access.expression

The default implementation of SecurityExpressionHandler which uses a MessageSecurityExpressionRoot.

DefaultMessageSecurityExpressionHandler() - Constructor for class org.springframework.security.messaging.access.expression.DefaultMessageSecurityExpressionHandler

denyAll() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are not allowed by anyone.

E

equals(Object) - Method in class org.springframework.security.messaging.util.matcher.SimpMessageTypeMatcher

F

fullyAuthenticated() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are allowed by users who have authenticated and were not "remembered".

G

getExpressionParser() - Method in class org.springframework.security.messaging.access.expression.MessageAuthorizationContextSecurityExpressionHandler

getMessage() - Method in class org.springframework.security.messaging.access.intercept.MessageAuthorizationContext

Returns the HttpServletRequest.

getMessageMatchers() - Method in class org.springframework.security.messaging.util.matcher.AbstractMessageMatcherComposite

getVariables() - Method in class org.springframework.security.messaging.access.intercept.MessageAuthorizationContext

Returns the extracted variable values where the key is the variable name and the value is the variable value.

getVariables() - Method in class org.springframework.security.messaging.util.matcher.MessageMatcher.MatchResult

Returns the extracted variable values where the key is the variable name and the value is the variable value

H

hasAnyAuthority(String...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Message instances requires any of a number authorities.

hasAnyRole(String...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Shortcut for specifying Message instances require any of a number of roles.

hasAuthority(String) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Message instances require a particular authority.

hashCode() - Method in class org.springframework.security.messaging.util.matcher.SimpMessageTypeMatcher

hasRole(String) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Shortcut for specifying Message instances require a particular role.

I

isMatch() - Method in class org.springframework.security.messaging.util.matcher.MessageMatcher.MatchResult

Return whether the comparison against the Message produced a successful match

L

logger - Variable in class org.springframework.security.messaging.util.matcher.AbstractMessageMatcherComposite

LOGGER - Variable in class org.springframework.security.messaging.util.matcher.AbstractMessageMatcherComposite

Deprecated.

since 5.4 in favor of AbstractMessageMatcherComposite.logger

M

match() - Static method in class org.springframework.security.messaging.util.matcher.MessageMatcher.MatchResult

Creates an instance of MessageMatcher.MatchResult that is a match with no variables

match(Map<String, String>) - Static method in class org.springframework.security.messaging.util.matcher.MessageMatcher.MatchResult

Creates an instance of MessageMatcher.MatchResult that is a match with the specified variables

matcher(String) - Method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher.Builder

Match messages having this destination pattern.

matcher(Message<?>) - Method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher

Extract the path variables from the Message destination if the path is a match, otherwise the MessageMatcher.MatchResult.getVariables() returns a Collections.emptyMap()

matcher(Message<? extends T>) - Method in interface org.springframework.security.messaging.util.matcher.MessageMatcher

Returns a MessageMatcher.MatchResult for this MessageMatcher.

matcher(SimpMessageType, String) - Method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher.Builder

Match messages having this type and destination pattern.

matchers(MessageMatcher<?>...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps a List of MessageMatcher instances to a security expression.

matches(Message<?>) - Method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher

Returns true if the Message matches, else false

matches(Message<?>) - Method in class org.springframework.security.messaging.util.matcher.SimpMessageTypeMatcher

matches(Message<? extends T>) - Method in class org.springframework.security.messaging.util.matcher.AndMessageMatcher

matches(Message<? extends T>) - Method in interface org.springframework.security.messaging.util.matcher.MessageMatcher

Returns true if the Message matches, else false

matches(Message<? extends T>) - Method in class org.springframework.security.messaging.util.matcher.OrMessageMatcher

message - Variable in class org.springframework.security.messaging.access.expression.MessageSecurityExpressionRoot

MessageAuthorizationContext<T> - Class in org.springframework.security.messaging.access.intercept

An Message authorization context.

MessageAuthorizationContext(Message<T>) - Constructor for class org.springframework.security.messaging.access.intercept.MessageAuthorizationContext

Creates an instance.

MessageAuthorizationContext(Message<T>, Map<String, String>) - Constructor for class org.springframework.security.messaging.access.intercept.MessageAuthorizationContext

Creates an instance.

MessageAuthorizationContextSecurityExpressionHandler - Class in org.springframework.security.messaging.access.expression

An expression handler for MessageAuthorizationContext.

MessageAuthorizationContextSecurityExpressionHandler() - Constructor for class org.springframework.security.messaging.access.expression.MessageAuthorizationContextSecurityExpressionHandler

MessageAuthorizationContextSecurityExpressionHandler(SecurityExpressionHandler<Message<?>>) - Constructor for class org.springframework.security.messaging.access.expression.MessageAuthorizationContextSecurityExpressionHandler

MessageMatcher<T> - Interface in org.springframework.security.messaging.util.matcher

API for determining if a Message should be matched on.

MessageMatcher.MatchResult - Class in org.springframework.security.messaging.util.matcher

The result of matching against a Message contains the status, true or false, of the match and if present, any variables extracted from the match

MessageMatcherDelegatingAuthorizationManager - Class in org.springframework.security.messaging.access.intercept

MessageMatcherDelegatingAuthorizationManager.Builder - Class in org.springframework.security.messaging.access.intercept

A builder for MessageMatcherDelegatingAuthorizationManager.

MessageMatcherDelegatingAuthorizationManager.Builder.Constraint - Class in org.springframework.security.messaging.access.intercept

Represents the security constraint to be applied to the MessageMatcher instances.

MessageSecurityExpressionRoot<T> - Class in org.springframework.security.messaging.access.expression

The SecurityExpressionRoot used for Message expressions.

MessageSecurityExpressionRoot(Supplier<? extends Authentication>, Message<T>) - Constructor for class org.springframework.security.messaging.access.expression.MessageSecurityExpressionRoot

Creates an instance for the given Supplier of the Authentication and Message.

MessageSecurityExpressionRoot(Authentication, Message<T>) - Constructor for class org.springframework.security.messaging.access.expression.MessageSecurityExpressionRoot

N

notMatch() - Static method in class org.springframework.security.messaging.util.matcher.MessageMatcher.MatchResult

Creates an instance of MessageMatcher.MatchResult that is not a match.

NULL_DESTINATION_MATCHER - Static variable in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher

nullDestMatcher() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps any Message that has a null SimpMessageHeaderAccessor destination header (i.e.

O

org.springframework.security.messaging.access.expression - package org.springframework.security.messaging.access.expression

Security expression support for Message.

org.springframework.security.messaging.access.intercept - package org.springframework.security.messaging.access.intercept

Authorization support for Message.

org.springframework.security.messaging.context - package org.springframework.security.messaging.context

Support for establishing the SecurityContext within messaging.

org.springframework.security.messaging.handler.invocation.reactive - package org.springframework.security.messaging.handler.invocation.reactive

Reactive support for resolving security related arguments.

org.springframework.security.messaging.util.matcher - package org.springframework.security.messaging.util.matcher

Support for matching messages.

org.springframework.security.messaging.web.csrf - package org.springframework.security.messaging.web.csrf

Support CSRF protection in messages.

org.springframework.security.messaging.web.socket.server - package org.springframework.security.messaging.web.socket.server

Reactive Security CSRF protection.

OrMessageMatcher<T> - Class in org.springframework.security.messaging.util.matcher

MessageMatcher that will return true if any of the passed in MessageMatcher instances match.

OrMessageMatcher(List<MessageMatcher<T>>) - Constructor for class org.springframework.security.messaging.util.matcher.OrMessageMatcher

Creates a new instance

OrMessageMatcher(MessageMatcher<T>...) - Constructor for class org.springframework.security.messaging.util.matcher.OrMessageMatcher

Creates a new instance

P

PathPatternMessageMatcher - Class in org.springframework.security.messaging.util.matcher

Match Messages based on the message destination pattern using a PathPattern.

PathPatternMessageMatcher.Builder - Class in org.springframework.security.messaging.util.matcher

A builder for specifying various elements of a message for the purpose of creating a PathPatternMessageMatcher.

permitAll() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are allowed by anyone.

postReceive(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.access.intercept.AuthorizationChannelInterceptor

preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.web.csrf.CsrfChannelInterceptor

preSend(Message<?>, MessageChannel) - Method in class org.springframework.security.messaging.web.csrf.XorCsrfChannelInterceptor

R

rememberMe() - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder.Constraint

Specify that Messages are allowed by users that have been remembered.

resolveArgument(MethodParameter, Message<?>) - Method in class org.springframework.security.messaging.context.AuthenticationPrincipalArgumentResolver

resolveArgument(MethodParameter, Message<?>) - Method in class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

resolveArgument(MethodParameter, Message<?>) - Method in class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

S

SecurityContextChannelInterceptor - Class in org.springframework.security.messaging.context

Creates a ExecutorChannelInterceptor that will obtain the Authentication from the specified Message.getHeaders().

SecurityContextChannelInterceptor() - Constructor for class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

Creates a new instance using the header of the name SimpMessageHeaderAccessor.USER_HEADER.

SecurityContextChannelInterceptor(String) - Constructor for class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

Creates a new instance that uses the specified header to obtain the Authentication.

SecurityContextPropagationChannelInterceptor - Class in org.springframework.security.messaging.context

An ExecutorChannelInterceptor that takes an Authentication from the current SecurityContext (if any) in the SecurityContextPropagationChannelInterceptor.preSend(Message, MessageChannel) callback and stores it into an SecurityContextPropagationChannelInterceptor.authenticationHeaderName message header.

SecurityContextPropagationChannelInterceptor() - Constructor for class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

Create a new instance using the header of the name SimpMessageHeaderAccessor.USER_HEADER.

SecurityContextPropagationChannelInterceptor(String) - Constructor for class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

Create a new instance that uses the specified header to populate the Authentication.

setAdapterRegistry(ReactiveAdapterRegistry) - Method in class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

Sets the ReactiveAdapterRegistry to be used.

setAdapterRegistry(ReactiveAdapterRegistry) - Method in class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

Sets the ReactiveAdapterRegistry to be used.

setAnonymousAuthentication(Authentication) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

Allows setting the Authentication used for anonymous authentication.

setAnonymousAuthentication(Authentication) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

Configure an Authentication used for anonymous authentication.

setApplicationContext(ApplicationContext) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

setAuthorizationEventPublisher(AuthorizationEventPublisher) - Method in class org.springframework.security.messaging.access.intercept.AuthorizationChannelInterceptor

Use this AuthorizationEventPublisher to publish the AuthorizationManager result.

setBeanResolver(BeanResolver) - Method in class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

Sets the BeanResolver to be used on the expressions

setBeanResolver(BeanResolver) - Method in class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

Sets the BeanResolver to be used on the expressions

setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.messaging.access.intercept.AuthorizationChannelInterceptor

Sets the SecurityContextHolderStrategy to use.

setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.messaging.context.AuthenticationPrincipalArgumentResolver

Sets the SecurityContextHolderStrategy to use.

setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.messaging.context.SecurityContextChannelInterceptor

setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.messaging.context.SecurityContextPropagationChannelInterceptor

setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.messaging.context.AuthenticationPrincipalArgumentResolver

Configure AuthenticationPrincipal template resolution

setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

Configure AuthenticationPrincipal template resolution

setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

Configure CurrentSecurityContext template resolution

setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.messaging.access.expression.DefaultMessageSecurityExpressionHandler

Deprecated.

Use AbstractSecurityExpressionHandler.setAuthorizationManagerFactory(AuthorizationManagerFactory) instead

simpDestMatchers(String...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps a List of PathPatternMessageMatchers instances without regard to the SimpMessageType.

simpMessageDestMatchers(String...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps a List of PathPatternMessageMatchers instances that match on SimpMessageType.MESSAGE.

SimpMessageTypeMatcher - Class in org.springframework.security.messaging.util.matcher

A MessageMatcher that matches if the provided Message has a type that is the same as the SimpMessageType that was specified in the constructor.

SimpMessageTypeMatcher(SimpMessageType) - Constructor for class org.springframework.security.messaging.util.matcher.SimpMessageTypeMatcher

Creates a new instance

simpSubscribeDestMatchers(String...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps a List of PathPatternMessageMatchers instances that match on SimpMessageType.SUBSCRIBE.

simpTypeMatchers(SimpMessageType...) - Method in class org.springframework.security.messaging.access.intercept.MessageMatcherDelegatingAuthorizationManager.Builder

Maps a List of SimpMessageTypeMatcher instances.

supportsParameter(MethodParameter) - Method in class org.springframework.security.messaging.context.AuthenticationPrincipalArgumentResolver

supportsParameter(MethodParameter) - Method in class org.springframework.security.messaging.handler.invocation.reactive.AuthenticationPrincipalArgumentResolver

supportsParameter(MethodParameter) - Method in class org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver

T

toString() - Method in class org.springframework.security.messaging.util.matcher.AbstractMessageMatcherComposite

toString() - Method in class org.springframework.security.messaging.util.matcher.SimpMessageTypeMatcher

W

withDefaults() - Static method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher

Initialize this builder with the PathPatternParser.defaultInstance that is configured with the PathContainer.Options.HTTP_PATH separator

withPathPatternParser(PathPatternParser) - Static method in class org.springframework.security.messaging.util.matcher.PathPatternMessageMatcher

Initialize this builder with the provided PathPatternParser

X

XorCsrfChannelInterceptor - Class in org.springframework.security.messaging.web.csrf

ChannelInterceptor that validates a CSRF token masked by the XorCsrfTokenRequestAttributeHandler in the header of any SimpMessageType.CONNECT message.

XorCsrfChannelInterceptor() - Constructor for class org.springframework.security.messaging.web.csrf.XorCsrfChannelInterceptor

A B C D E F G H I L M N O P R S T W X
All Classes and Interfaces|All Packages