Class WebExpressionAuthorizationManager
- java.lang.Object
-
- org.springframework.security.web.access.expression.WebExpressionAuthorizationManager
-
- All Implemented Interfaces:
org.springframework.security.authorization.AuthorizationManager<RequestAuthorizationContext>
public final class WebExpressionAuthorizationManager extends java.lang.Object implements org.springframework.security.authorization.AuthorizationManager<RequestAuthorizationContext>
An expression-basedAuthorizationManager
that determines the access by evaluating the provided expression.- Since:
- 5.8
-
-
Constructor Summary
Constructors Constructor Description WebExpressionAuthorizationManager(java.lang.String expressionString)
Creates an instance.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description org.springframework.security.authorization.AuthorizationDecision
check(java.util.function.Supplier<org.springframework.security.core.Authentication> authentication, RequestAuthorizationContext context)
Determines the access by evaluating the provided expression.void
setExpressionHandler(org.springframework.security.access.expression.SecurityExpressionHandler<RequestAuthorizationContext> expressionHandler)
Sets theSecurityExpressionHandler
to be used.java.lang.String
toString()
-
-
-
Method Detail
-
setExpressionHandler
public void setExpressionHandler(org.springframework.security.access.expression.SecurityExpressionHandler<RequestAuthorizationContext> expressionHandler)
Sets theSecurityExpressionHandler
to be used. The default isDefaultHttpSecurityExpressionHandler
.- Parameters:
expressionHandler
- theSecurityExpressionHandler
to use
-
check
public org.springframework.security.authorization.AuthorizationDecision check(java.util.function.Supplier<org.springframework.security.core.Authentication> authentication, RequestAuthorizationContext context)
Determines the access by evaluating the provided expression.- Specified by:
check
in interfaceorg.springframework.security.authorization.AuthorizationManager<RequestAuthorizationContext>
- Parameters:
authentication
- theSupplier
of theAuthentication
to checkcontext
- theRequestAuthorizationContext
to check- Returns:
- an
ExpressionAuthorizationDecision
based on the evaluated expression
-
toString
public java.lang.String toString()
- Overrides:
toString
in classjava.lang.Object
-
-