Package org.springframework.security.authorization.method

Class PostAuthorizeReactiveAuthorizationManager

java.lang.Object

org.springframework.security.authorization.method.PostAuthorizeReactiveAuthorizationManager

All Implemented Interfaces:

ReactiveAuthorizationManager<MethodInvocationResult>

public final class PostAuthorizeReactiveAuthorizationManager
extends Object
implements ReactiveAuthorizationManager<MethodInvocationResult>

A ReactiveAuthorizationManager which can determine if an Authentication has access to the returned object from the MethodInvocation by evaluating an expression from the PostAuthorize annotation.

Since:

5.8

Constructor Summary

Constructors

Constructor	Description
PostAuthorizeReactiveAuthorizationManager()
PostAuthorizeReactiveAuthorizationManager(MethodSecurityExpressionHandler expressionHandler)

Method Summary

Modifier and Type	Method	Description
reactor.core.publisher.Mono<AuthorizationDecision>	check(reactor.core.publisher.Mono<Authentication> authentication, MethodInvocationResult result)	Determines if an Authentication has access to the returned object from the MethodInvocation by evaluating an expression from the PostAuthorize annotation.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.security.authorization.ReactiveAuthorizationManager

verify

Constructor Details

PostAuthorizeReactiveAuthorizationManager

public PostAuthorizeReactiveAuthorizationManager()

PostAuthorizeReactiveAuthorizationManager

public PostAuthorizeReactiveAuthorizationManager(MethodSecurityExpressionHandler expressionHandler)

Method Details

check

public reactor.core.publisher.Mono<AuthorizationDecision> check(reactor.core.publisher.Mono<Authentication> authentication,
 MethodInvocationResult result)

Determines if an Authentication has access to the returned object from the MethodInvocation by evaluating an expression from the PostAuthorize annotation.

Specified by:

check in interface ReactiveAuthorizationManager<MethodInvocationResult>

Parameters:

authentication - the Mono of the Authentication to check

result - the MethodInvocationResult to check

Returns:

a Mono of the AuthorizationDecision or an empty Mono if the PostAuthorize annotation is not present