Package org.springframework.security.web.access.intercept

Class RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl

java.lang.Object

org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl

Enclosing class:

RequestMatcherDelegatingAuthorizationManager.Builder

public final class RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
extends Object

An object that allows configuring the AuthorizationManager for RequestMatchers.

Since:

6.2

Method Summary

Modifier and Type	Method	Description
RequestMatcherDelegatingAuthorizationManager.Builder	anonymous()	Specify that URLs are allowed by anonymous users.
RequestMatcherDelegatingAuthorizationManager.Builder	authenticated()	Specify that URLs are allowed by any authenticated user.
RequestMatcherDelegatingAuthorizationManager.Builder	denyAll()	Specify that URLs are not allowed by anyone.
RequestMatcherDelegatingAuthorizationManager.Builder	fullyAuthenticated()	Specify that URLs are allowed by users who have authenticated and were not "remembered".
RequestMatcherDelegatingAuthorizationManager.Builder	hasAnyAuthority(String... authorities)	Specifies that a user requires one of many authorities.
RequestMatcherDelegatingAuthorizationManager.Builder	hasAnyRole(String... roles)	Specifies that a user requires one of many roles.
RequestMatcherDelegatingAuthorizationManager.Builder	hasAuthority(String authority)	Specifies a user requires an authority.
RequestMatcherDelegatingAuthorizationManager.Builder	hasRole(String role)	Specifies a user requires a role.
RequestMatcherDelegatingAuthorizationManager.Builder	permitAll()	Specify that URLs are allowed by anyone.
RequestMatcherDelegatingAuthorizationManager.Builder	rememberMe()	Specify that URLs are allowed by users that have been remembered.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

permitAll

public RequestMatcherDelegatingAuthorizationManager.Builder permitAll()

Specify that URLs are allowed by anyone.

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

denyAll

public RequestMatcherDelegatingAuthorizationManager.Builder denyAll()

Specify that URLs are not allowed by anyone.

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

authenticated

public RequestMatcherDelegatingAuthorizationManager.Builder authenticated()

Specify that URLs are allowed by any authenticated user.

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

fullyAuthenticated

public RequestMatcherDelegatingAuthorizationManager.Builder fullyAuthenticated()

Specify that URLs are allowed by users who have authenticated and were not "remembered".

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customization

rememberMe

public RequestMatcherDelegatingAuthorizationManager.Builder rememberMe()

Specify that URLs are allowed by users that have been remembered.

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customization

anonymous

public RequestMatcherDelegatingAuthorizationManager.Builder anonymous()

Specify that URLs are allowed by anonymous users.

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customization

hasRole

public RequestMatcherDelegatingAuthorizationManager.Builder hasRole(String role)

Specifies a user requires a role.

Parameters:

role - the role that should be required which is prepended with ROLE_ automatically (i.e. USER, ADMIN, etc). It should not start with ROLE_

Returns:

RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

hasAnyRole

public RequestMatcherDelegatingAuthorizationManager.Builder hasAnyRole(String... roles)

Specifies that a user requires one of many roles.

Parameters:

roles - the roles that the user should have at least one of (i.e. ADMIN, USER, etc). Each role should not start with ROLE_ since it is automatically prepended already

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

hasAuthority

public RequestMatcherDelegatingAuthorizationManager.Builder hasAuthority(String authority)

Specifies a user requires an authority.

Parameters:

authority - the authority that should be required

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations

hasAnyAuthority

public RequestMatcherDelegatingAuthorizationManager.Builder hasAnyAuthority(String... authorities)

Specifies that a user requires one of many authorities.

Parameters:

authorities - the authorities that the user should have at least one of (i.e. ROLE_USER, ROLE_ADMIN, etc)

Returns:

the RequestMatcherDelegatingAuthorizationManager.Builder for further customizations