# Package org.springframework.security.authorization.method

package org.springframework.security.authorization.method

Related Packages
Package
Description
org.springframework.security.authorization
org.springframework.security.authorization.event
Class
Description
AuthorizationAdvisor
An interface that indicates method security advice
AuthorizationAdvisorProxyFactory
A proxy factory for applying authorization advice to an arbitrary object.
AuthorizationAdvisorProxyFactory.TargetVisitor
An interface to handle how the `AuthorizationAdvisorProxyFactory` should step through the target's object hierarchy.
AuthorizationInterceptorsOrder
Ordering of Spring Security's authorization `Advisor`s
AuthorizationManagerAfterMethodInterceptor
A `MethodInterceptor` which can determine if an `Authentication` has access to the result of an `MethodInvocation` using an `AuthorizationManager`
AuthorizationManagerAfterReactiveMethodInterceptor
A `MethodInterceptor` which can determine if an `Authentication` has access to the returned object from the `MethodInvocation` using the configured `ReactiveAuthorizationManager`.
AuthorizationManagerBeforeMethodInterceptor
A `MethodInterceptor` which uses a `AuthorizationManager` to determine if an `Authentication` may invoke the given `MethodInvocation`
AuthorizationManagerBeforeReactiveMethodInterceptor
A `MethodInterceptor` which can determine if an `Authentication` has access to the `MethodInvocation` using the configured `ReactiveAuthorizationManager`.
AuthorizationProxy
An interface that is typically implemented by Spring Security's AOP support to identify an instance as being proxied by Spring Security.
AuthorizeReturnObject
Wraps Spring Security method authorization advice around the return object of any method this annotation is applied to.
AuthorizeReturnObjectMethodInterceptor
A method interceptor that applies the given `AuthorizationProxyFactory` to any return value annotated with `AuthorizeReturnObject`
ExpressionAttributeAuthorizationDecision
Deprecated.
Use `ExpressionAuthorizationDecision` instead
HandleAuthorizationDenied
Annotation for specifying handling behavior when an authorization denied happens in method security or an `AuthorizationDeniedException` is thrown during method invocation
Jsr250AuthorizationManager
An `AuthorizationManager` which can determine if an `Authentication` may invoke the `MethodInvocation` by evaluating if the `Authentication` contains a specified authority from the JSR-250 security annotations.
MethodAuthorizationDeniedHandler
An interface used to define a strategy to handle denied method invocations
MethodExpressionAuthorizationManager
An expression-based `AuthorizationManager` that determines the access by evaluating the provided expression against the `MethodInvocation`.
MethodInvocationResult
A context object that contains a `MethodInvocation` and the result of that `MethodInvocation`.
PostAuthorizeAuthorizationManager
An `AuthorizationManager` which can determine if an `Authentication` may return the result from an invoked `MethodInvocation` by evaluating an expression from the `PostAuthorize` annotation.
PostAuthorizeReactiveAuthorizationManager
A `ReactiveAuthorizationManager` which can determine if an `Authentication` has access to the returned object from the `MethodInvocation` by evaluating an expression from the `PostAuthorize` annotation.
PostFilterAuthorizationMethodInterceptor
A `MethodInterceptor` which filters a `returnedObject` from the `MethodInvocation` by evaluating an expression from the `PostFilter` annotation.
PostFilterAuthorizationReactiveMethodInterceptor
A `MethodInterceptor` which filters the returned object from the `MethodInvocation` by evaluating an expression from the `PostFilter` annotation.
PreAuthorizeAuthorizationManager
An `AuthorizationManager` which can determine if an `Authentication` may invoke the `MethodInvocation` by evaluating an expression from the `PreAuthorize` annotation.
PreAuthorizeReactiveAuthorizationManager
A `ReactiveAuthorizationManager` which can determine if an `Authentication` has access to the `MethodInvocation` by evaluating an expression from the `PreAuthorize` annotation.
PreFilterAuthorizationMethodInterceptor
A `MethodInterceptor` which filters a method argument by evaluating an expression from the `PreFilter` annotation.
PreFilterAuthorizationReactiveMethodInterceptor
A `MethodInterceptor` which filters a reactive method argument by evaluating an expression from the `PreFilter` annotation.
PrePostTemplateDefaults
Deprecated.
Please use `AnnotationTemplateExpressionDefaults` instead
SecuredAuthorizationManager
An `AuthorizationManager` which can determine if an `Authentication` may invoke the `MethodInvocation` by evaluating if the `Authentication` contains a specified authority from the Spring Security's `Secured` annotation.
ThrowingMethodAuthorizationDeniedHandler
An implementation of `MethodAuthorizationDeniedHandler` that throws `AuthorizationDeniedException`