Package org.springframework.security.web.access.expression

Class DefaultHttpSecurityExpressionHandler

  • All Implemented Interfaces:
    org.springframework.aop.framework.AopInfrastructureBean, org.springframework.beans.factory.Aware, org.springframework.context.ApplicationContextAware, org.springframework.security.access.expression.SecurityExpressionHandler<RequestAuthorizationContext>
    public class DefaultHttpSecurityExpressionHandler
extends org.springframework.security.access.expression.AbstractSecurityExpressionHandler<RequestAuthorizationContext>
implements org.springframework.security.access.expression.SecurityExpressionHandler<RequestAuthorizationContext>
    A SecurityExpressionHandler that uses a RequestAuthorizationContext to create a WebSecurityExpressionRoot.
    Since:
    5.8

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.expression.EvaluationContext createEvaluationContext​(java.util.function.Supplier<org.springframework.security.core.Authentication> authentication, RequestAuthorizationContext context)  
      protected org.springframework.security.access.expression.SecurityExpressionOperations createSecurityExpressionRoot​(org.springframework.security.core.Authentication authentication, RequestAuthorizationContext context)  
      void setDefaultRolePrefix​(java.lang.String defaultRolePrefix)
      Sets the default prefix to be added to SecurityExpressionRoot.hasAnyRole(String...) or SecurityExpressionRoot.hasRole(String).
      void setTrustResolver​(org.springframework.security.authentication.AuthenticationTrustResolver trustResolver)
      Sets the AuthenticationTrustResolver to be used.

      • Methods inherited from class org.springframework.security.access.expression.AbstractSecurityExpressionHandler

        createEvaluationContext, createEvaluationContextInternal, getBeanResolver, getExpressionParser, getPermissionEvaluator, getRoleHierarchy, setApplicationContext, setExpressionParser, setPermissionEvaluator, setRoleHierarchy

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

      • Methods inherited from interface org.springframework.security.access.expression.SecurityExpressionHandler

        createEvaluationContext, getExpressionParser

    • Constructor Detail

      • DefaultHttpSecurityExpressionHandler

        public DefaultHttpSecurityExpressionHandler()

    • Method Detail

      • createEvaluationContext

        public org.springframework.expression.EvaluationContext createEvaluationContext​(java.util.function.Supplier<org.springframework.security.core.Authentication> authentication,
                                                                                RequestAuthorizationContext context)
        Specified by:
        createEvaluationContext in interface org.springframework.security.access.expression.SecurityExpressionHandler<RequestAuthorizationContext>

      • createSecurityExpressionRoot

        protected org.springframework.security.access.expression.SecurityExpressionOperations createSecurityExpressionRoot​(org.springframework.security.core.Authentication authentication,
                                                                                                                   RequestAuthorizationContext context)
        Specified by:
        createSecurityExpressionRoot in class org.springframework.security.access.expression.AbstractSecurityExpressionHandler<RequestAuthorizationContext>

      • setTrustResolver

        public void setTrustResolver​(org.springframework.security.authentication.AuthenticationTrustResolver trustResolver)
        Sets the AuthenticationTrustResolver to be used. The default is AuthenticationTrustResolverImpl.
        Parameters:
        trustResolver - the AuthenticationTrustResolver to use

      • setDefaultRolePrefix

        public void setDefaultRolePrefix​(java.lang.String defaultRolePrefix)
        Sets the default prefix to be added to SecurityExpressionRoot.hasAnyRole(String...) or SecurityExpressionRoot.hasRole(String). For example, if hasRole("ADMIN") or hasRole("ROLE_ADMIN") is passed in, then the role ROLE_ADMIN will be used when the defaultRolePrefix is "ROLE_" (default).
        Parameters:
        defaultRolePrefix - the default prefix to add to roles. The default is "ROLE_".