# Index

A B C D E F G H I J L M N O P R S T U V W X
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

## A

AbstractAuthenticationProcessingFilter - Class in org.springframework.security.web.authentication
  Abstract processor of browser-based HTTP-based authentication requests.
AbstractAuthenticationProcessingFilter(String) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
AbstractAuthenticationProcessingFilter(String, AuthenticationManager) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Creates a new instance with a default filterProcessesUrl and an `AuthenticationManager`
AbstractAuthenticationProcessingFilter(RequestMatcher) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Creates a new instance
AbstractAuthenticationProcessingFilter(RequestMatcher, AuthenticationManager) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Creates a new instance with a `RequestMatcher` and an `AuthenticationManager`
AbstractAuthenticationTargetUrlRequestHandler - Class in org.springframework.security.web.authentication
  Base class containing the logic used by strategies which handle redirection to a URL and are passed an `Authentication` object as part of the contract.
AbstractAuthenticationTargetUrlRequestHandler() - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
AbstractPreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth
  Base class for processing filters that handle pre-authenticated authentication requests, where it is assumed that the principal has already been authenticated by an external system.
AbstractPreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
AbstractRememberMeServices - Class in org.springframework.security.web.authentication.rememberme
  Base class for RememberMeServices implementations.
AbstractRememberMeServices(String, UserDetailsService) - Constructor for class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
AbstractRequestParameterAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
AbstractRetryEntryPoint - Class in org.springframework.security.web.access.channel
AbstractRetryEntryPoint(String, int) - Constructor for class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
AbstractSecurityWebApplicationInitializer - Class in org.springframework.security.web.context
  Registers the `DelegatingFilterProxy` to use the springSecurityFilterChain before any other registered `Filter`.
AbstractSecurityWebApplicationInitializer() - Constructor for class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Creates a new instance that assumes the Spring Security configuration is loaded by some other means than this class.
AbstractSecurityWebApplicationInitializer(Class<?>...) - Constructor for class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Creates a new instance that will instantiate the `ContextLoaderListener` with the specified classes.
AbstractSessionFixationProtectionStrategy - Class in org.springframework.security.web.authentication.session
  A base class for performing session fixation protection.
AbstractSessionFixationProtectionStrategy.NullEventPublisher - Class in org.springframework.security.web.authentication.session
ACCESS_DENIED_403 - Static variable in class org.springframework.security.web.WebAttributes
  Used to cache an `AccessDeniedException` in the request for rendering.
AccessDeniedHandler - Interface in org.springframework.security.web.access
  Used by `ExceptionTranslationFilter` to handle an `AccessDeniedException`.
AccessDeniedHandlerImpl - Class in org.springframework.security.web.access
  Base implementation of `AccessDeniedHandler`.
AccessDeniedHandlerImpl() - Constructor for class org.springframework.security.web.access.AccessDeniedHandlerImpl
add(ServerWebExchangeMatcherEntry<ReactiveAuthorizationManager<AuthorizationContext>>) - Method in class org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager.Builder
add(ServerWebExchangeMatcher, ReactiveAuthenticationManager) - Method in class org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.Builder
  Maps a `ServerWebExchangeMatcher` to an `ReactiveAuthenticationManager`.
add(RequestMatcher, AuthenticationManager) - Method in class org.springframework.security.web.authentication.RequestMatcherDelegatingAuthenticationManagerResolver.Builder
  Maps a `RequestMatcher` to an `AuthorizationManager`.
add(RequestMatcher, AuthorizationManager<RequestAuthorizationContext>) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
  Maps a `RequestMatcher` to an `AuthorizationManager`.
addHeader(String, String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
addSha256Pins(String...) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Adds a list of SHA256 hashed pins for the pin- directive of the Public-Key-Pins header.
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
afterPropertiesSet() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Check whether all required properties have been set.
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
  Check that all required properties have been set.
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever
  Loads the web.xml file using the configured `ResourceLoader` and parses the role-name elements from it, using these as the set of `mappableAttributes`.
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  Check whether all required properties have been set.
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
afterPropertiesSet() - Method in class org.springframework.security.web.FilterChainProxy
afterPropertiesSet() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
afterPropertiesSet() - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
afterSpringSecurityFilterChain(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Invoked after the springSecurityFilterChain is added.
ALL - Enum constant in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
ALL - Enum constant in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
allOf(RequestMatcher...) - Static method in class org.springframework.security.web.util.matcher.RequestMatchers
  Creates a `RequestMatcher` that matches if all the given `RequestMatcher`s match, if `matchers` are empty then the returned matcher always matches.
ALLOW_FROM - Enum constant in enum class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
allowableSessionsExceeded(List<SessionInformation>, int, SessionRegistry) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  Allows subclasses to customise behaviour when too many sessions are detected.
allowCredentials(List<PublicKeyCredentialDescriptor>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getAllowCredentials()` property
allowed(String) - Method in class org.springframework.security.web.header.writers.frameoptions.AbstractRequestParameterAllowFromStrategy
  Deprecated.
  Method to be implemented by base classes, used to determine if the supplied origin is allowed.
allowed(String) - Method in class org.springframework.security.web.header.writers.frameoptions.RegExpAllowFromStrategy
  Deprecated.
allowed(String) - Method in class org.springframework.security.web.header.writers.frameoptions.WhiteListedAllowFromStrategy
  Deprecated.
ALLOWED_HEADER_NAMES - Static variable in class org.springframework.security.web.firewall.StrictHttpFirewall
ALLOWED_HEADER_NAMES - Static variable in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
ALLOWED_HEADER_VALUES - Static variable in class org.springframework.security.web.firewall.StrictHttpFirewall
ALLOWED_HEADER_VALUES - Static variable in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
ALLOWED_PARAMETER_NAMES - Static variable in class org.springframework.security.web.firewall.StrictHttpFirewall
ALLOWED_PARAMETER_NAMES - Static variable in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
ALLOWED_PARAMETER_VALUES - Static variable in class org.springframework.security.web.firewall.StrictHttpFirewall
ALLOWED_PARAMETER_VALUES - Static variable in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
AllowFromStrategy - Interface in org.springframework.security.web.header.writers.frameoptions
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
AndRequestMatcher - Class in org.springframework.security.web.util.matcher
  `RequestMatcher` that will return true if all of the passed in `RequestMatcher` instances match.
AndRequestMatcher(List<RequestMatcher>) - Constructor for class org.springframework.security.web.util.matcher.AndRequestMatcher
  Creates a new instance
AndRequestMatcher(RequestMatcher...) - Constructor for class org.springframework.security.web.util.matcher.AndRequestMatcher
  Creates a new instance
AndServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Matches if all the provided `ServerWebExchangeMatcher` match
AndServerWebExchangeMatcher(List<ServerWebExchangeMatcher>) - Constructor for class org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher
AndServerWebExchangeMatcher(ServerWebExchangeMatcher...) - Constructor for class org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher
anonymous() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are allowed by anonymous users.
AnonymousAuthenticationFilter - Class in org.springframework.security.web.authentication
  Detects if there is no `Authentication` object in the `SecurityContextHolder`, and populates it with one if needed.
AnonymousAuthenticationFilter(String) - Constructor for class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
  Creates a filter with a principal named "anonymousUser" and the single authority "ROLE_ANONYMOUS".
AnonymousAuthenticationFilter(String, Object, List<GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
AnonymousAuthenticationWebFilter - Class in org.springframework.security.web.server.authentication
  Detects if there is no `Authentication` object in the `ReactiveSecurityContextHolder`, and populates it with one if needed.
AnonymousAuthenticationWebFilter(String) - Constructor for class org.springframework.security.web.server.authentication.AnonymousAuthenticationWebFilter
  Creates a filter with a principal named "anonymousUser" and the single authority "ROLE_ANONYMOUS".
AnonymousAuthenticationWebFilter(String, Object, List<GrantedAuthority>) - Constructor for class org.springframework.security.web.server.authentication.AnonymousAuthenticationWebFilter
antMatcher(String) - Static method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the specific pattern which will match all HTTP methods in a case-sensitive manner.
antMatcher(HttpMethod) - Static method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher that will match all request with the supplied HTTP method in a case-sensitive manner.
antMatcher(HttpMethod, String) - Static method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the supplied pattern and HTTP method in a case-sensitive manner.
AntPathRequestMatcher - Class in org.springframework.security.web.util.matcher
  Matcher which compares a pre-defined ant-style pattern against the URL ( `servletPath + pathInfo`) of an `HttpServletRequest`.
AntPathRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the specific pattern which will match all HTTP methods in a case sensitive manner.
AntPathRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the supplied pattern and HTTP method in a case sensitive manner.
AntPathRequestMatcher(String, String, boolean) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the supplied pattern which will match the specified Http method
AntPathRequestMatcher(String, String, boolean, UrlPathHelper) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Creates a matcher with the supplied pattern which will match the specified Http method
ANY_CHANNEL - Static variable in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
anyExchange() - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Matches any exchange
anyOf(RequestMatcher...) - Static method in class org.springframework.security.web.util.matcher.RequestMatchers
  Creates a `RequestMatcher` that matches if at least one of the given `RequestMatcher`s matches, if `matchers` are empty then the returned matcher never matches.
anyRequest() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
  Maps any request.
AnyRequestMatcher - Class in org.springframework.security.web.util.matcher
  Matches any supplied request.
appendFilters(ServletContext, Filter...) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Inserts the provided `Filter`s after existing `Filter`s using default generated names, `AbstractSecurityWebApplicationInitializer.getSecurityDispatcherTypes()`, and `AbstractSecurityWebApplicationInitializer.isAsyncSecuritySupported()`.
apply(ServerWebExchange) - Method in class org.springframework.security.web.server.ServerFormLoginAuthenticationConverter
  Deprecated.
apply(ServerWebExchange) - Method in class org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter
  Deprecated.
attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Performs actual authentication.
attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationFilter
attemptExitUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Attempt to exit from an already switched user.
attemptSwitchUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Attempt to switch to another user.
attestation(AttestationConveyancePreference) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getAttestation()` property.
attestationClientDataJSON(Bytes) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
AttestationConveyancePreference - Class in org.springframework.security.web.webauthn.api
  WebAuthn Relying Parties may use AttestationConveyancePreference to specify their preference regarding attestation conveyance during credential generation.
attestationObject(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Set the `AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder.attestationObject` property
attestationObject(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder
  Sets the `AuthenticatorAttestationResponse.getAttestationObject()` property.
attestationObject(Bytes) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
authenticate(Authentication) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  Authenticate the given PreAuthenticatedAuthenticationToken.
authenticate(Authentication) - Method in class org.springframework.security.web.server.authentication.ReactivePreAuthenticatedAuthenticationManager
authenticate(Authentication) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationProvider
authenticate(RelyingPartyAuthenticationRequest) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
authenticate(RelyingPartyAuthenticationRequest) - Method in interface org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations
  Authenticates the `RelyingPartyAuthenticationRequest` passed in
authenticated() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are allowed by any authenticated user.
AUTHENTICATION_EXCEPTION - Static variable in class org.springframework.security.web.WebAttributes
  Used to cache an authentication-failure exception in the session.
AUTHENTICATION_SCHEME_BASIC - Static variable in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
AuthenticationConverter - Interface in org.springframework.security.web.authentication
  A strategy used for converting from a `HttpServletRequest` to an `Authentication` of particular type.
AuthenticationConverterServerWebExchangeMatcher - Class in org.springframework.security.web.server.authentication
  Matches if the `ServerAuthenticationConverter` can convert a `ServerWebExchange` to an `Authentication`.
AuthenticationConverterServerWebExchangeMatcher(ServerAuthenticationConverter) - Constructor for class org.springframework.security.web.server.authentication.AuthenticationConverterServerWebExchangeMatcher
authenticationDetailsSource - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
AuthenticationEntryPoint - Interface in org.springframework.security.web
  Used by `ExceptionTranslationFilter` to commence an authentication scheme.
AuthenticationEntryPointFailureHandler - Class in org.springframework.security.web.authentication
  Adapts a `AuthenticationEntryPoint` into a `AuthenticationFailureHandler`
AuthenticationEntryPointFailureHandler(AuthenticationEntryPoint) - Constructor for class org.springframework.security.web.authentication.AuthenticationEntryPointFailureHandler
AuthenticationExtensionsClientInput<T> - Interface in org.springframework.security.web.webauthn.api
  A client extension input entry in the `AuthenticationExtensionsClientInputs`.
AuthenticationExtensionsClientInputs - Interface in org.springframework.security.web.webauthn.api
  AuthenticationExtensionsClientInputs is a dictionary containing the client extension input values for zero or more WebAuthn Extensions.
AuthenticationExtensionsClientOutput<T> - Interface in org.springframework.security.web.webauthn.api
  A client extension output entry in `AuthenticationExtensionsClientOutputs`.
AuthenticationExtensionsClientOutputs - Interface in org.springframework.security.web.webauthn.api
  AuthenticationExtensionsClientOutputs is a dictionary containing the client extension output values for zero or more WebAuthn Extensions.
AuthenticationFailureHandler - Interface in org.springframework.security.web.authentication
  Strategy used to handle a failed authentication attempt.
AuthenticationFilter - Class in org.springframework.security.web.authentication
  A `Filter` that performs authentication of a particular request.
AuthenticationFilter(AuthenticationManagerResolver<HttpServletRequest>, AuthenticationConverter) - Constructor for class org.springframework.security.web.authentication.AuthenticationFilter
AuthenticationFilter(AuthenticationManager, AuthenticationConverter) - Constructor for class org.springframework.security.web.authentication.AuthenticationFilter
authenticationIsRequired(String) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
AuthenticationPrincipal - Annotation Interface in org.springframework.security.web.bind.annotation
  Deprecated.
  Use `AuthenticationPrincipal` instead.
AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.web.bind.support
  Deprecated.
  Use `AuthenticationPrincipalArgumentResolver` instead.
AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.web.method.annotation
  Allows resolving the `Authentication.getPrincipal()` using the `AuthenticationPrincipal` annotation.
AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.web.reactive.result.method.annotation
  Resolves the Authentication
AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver
  Deprecated.
AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
AuthenticationPrincipalArgumentResolver(ReactiveAdapterRegistry) - Constructor for class org.springframework.security.web.reactive.result.method.annotation.AuthenticationPrincipalArgumentResolver
AuthenticationSuccessHandler - Interface in org.springframework.security.web.authentication
  Strategy used to handle a successful user authentication.
AuthenticationSwitchUserEvent - Class in org.springframework.security.web.authentication.switchuser
  Application event which indicates that a user context switch.
AuthenticationSwitchUserEvent(Authentication, UserDetails) - Constructor for class org.springframework.security.web.authentication.switchuser.AuthenticationSwitchUserEvent
  Switch user context event constructor
AuthenticationWebFilter - Class in org.springframework.security.web.server.authentication
  A `WebFilter` that performs authentication of a particular request.
AuthenticationWebFilter(ReactiveAuthenticationManager) - Constructor for class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Creates an instance
AuthenticationWebFilter(ReactiveAuthenticationManagerResolver<ServerWebExchange>) - Constructor for class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Creates an instance
AuthenticatorAssertionResponse - Class in org.springframework.security.web.webauthn.api
  The AuthenticatorAssertionResponse interface represents an authenticator's response to a client's request for generation of a new authentication assertion given the WebAuthn Relying Party's challenge and OPTIONAL list of credentials it is aware of.
AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder - Class in org.springframework.security.web.webauthn.api
  Builds a `AuthenticatorAssertionResponse`.
authenticatorAttachment(AuthenticatorAttachment) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder
  Sets the `AuthenticatorSelectionCriteria.getAuthenticatorAttachment()` property.
authenticatorAttachment(AuthenticatorAttachment) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getAuthenticatorAttachment()` property.
AuthenticatorAttachment - Class in org.springframework.security.web.webauthn.api
  The AuthenticatorAttachment.
AuthenticatorAttestationResponse - Class in org.springframework.security.web.webauthn.api
  AuthenticatorAttestationResponse represents the authenticator's response to a client's request for the creation of a new public key credential.
AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder - Class in org.springframework.security.web.webauthn.api
  Builds `AuthenticatorAssertionResponse`.
authenticatorData(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Set the `AuthenticatorAssertionResponse.getAuthenticatorData()` property
AuthenticatorResponse - Class in org.springframework.security.web.webauthn.api
  The AuthenticatorResponse represents Authenticators respond to Relying Party requests.
authenticatorSelection(AuthenticatorSelectionCriteria) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getAuthenticatorSelection()` property.
AuthenticatorSelectionCriteria - Class in org.springframework.security.web.webauthn.api
  AuthenticatorAttachment can be used by WebAuthn Relying Parties to specify their requirements regarding authenticator attributes.
AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder - Class in org.springframework.security.web.webauthn.api
  Creates a `AuthenticatorSelectionCriteria`
AuthenticatorTransport - Class in org.springframework.security.web.webauthn.api
  AuthenticatorTransport defines hints as to how clients might communicate with a particular authenticator in order to obtain an assertion for a specific credential.
AuthorizationContext - Class in org.springframework.security.web.server.authorization
AuthorizationContext(ServerWebExchange) - Constructor for class org.springframework.security.web.server.authorization.AuthorizationContext
AuthorizationContext(ServerWebExchange, Map<String, Object>) - Constructor for class org.springframework.security.web.server.authorization.AuthorizationContext
AuthorizationFilter - Class in org.springframework.security.web.access.intercept
  An authorization filter that restricts access to the URL using `AuthorizationManager`.
AuthorizationFilter(AuthorizationManager<HttpServletRequest>) - Constructor for class org.springframework.security.web.access.intercept.AuthorizationFilter
  Creates an instance.
AuthorizationManagerWebInvocationPrivilegeEvaluator - Class in org.springframework.security.web.access
  An implementation of `WebInvocationPrivilegeEvaluator` which delegates the checks to an instance of `AuthorizationManager`
AuthorizationManagerWebInvocationPrivilegeEvaluator(AuthorizationManager<HttpServletRequest>) - Constructor for class org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator
AuthorizationManagerWebInvocationPrivilegeEvaluator.HttpServletRequestTransformer - Interface in org.springframework.security.web.access
  Used to transform the `HttpServletRequest` prior to passing it into the `AuthorizationManager`.
AuthorizationWebFilter - Class in org.springframework.security.web.server.authorization
AuthorizationWebFilter(ReactiveAuthorizationManager<? super ServerWebExchange>) - Constructor for class org.springframework.security.web.server.authorization.AuthorizationWebFilter
autoLogin(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.NullRememberMeServices
autoLogin(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Template implementation which locates the Spring Security cookie, decodes it into a delimited array of tokens and submits it to subclasses for processing via the `processAutoLoginCookie` method.
autoLogin(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.RememberMeServices
  This method will be called whenever the `SecurityContextHolder` does not contain an `Authentication` object and Spring Security wishes to provide an implementation with an opportunity to authenticate the request using remember-me capabilities.

## B

backupEligible(boolean) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
backupState(boolean) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
BASIC - Static variable in class org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter
  Deprecated.
BasicAuthenticationConverter - Class in org.springframework.security.web.authentication.www
  Converts from a HttpServletRequest to `UsernamePasswordAuthenticationToken` that can be authenticated.
BasicAuthenticationConverter() - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
BasicAuthenticationConverter(AuthenticationDetailsSource<HttpServletRequest, ?>) - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
BasicAuthenticationEntryPoint - Class in org.springframework.security.web.authentication.www
  Used by the `ExceptionTranslationFilter` to commence authentication via the `BasicAuthenticationFilter`.
BasicAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint
BasicAuthenticationFilter - Class in org.springframework.security.web.authentication.www
  Processes a HTTP request's BASIC authorization headers, putting the result into the `SecurityContextHolder`.
BasicAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Creates an instance which will authenticate against the supplied `AuthenticationManager` and which will ignore failed authentication attempts, allowing the request to proceed down the filter chain.
BasicAuthenticationFilter(AuthenticationManager, AuthenticationEntryPoint) - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Creates an instance which will authenticate against the supplied `AuthenticationManager` and use the supplied `AuthenticationEntryPoint` to handle authentication failures.
bearerToken(String) - Static method in class org.springframework.security.web.http.SecurityHeaders
  Sets the provided value as a Bearer token in a header with the name of `HttpHeaders.AUTHORIZATION`
beforeConcurrentHandling(NativeWebRequest, Callable<T>) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
beforeSpringSecurityFilterChain(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Invoked before the springSecurityFilterChain is added.
BLE - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  ble Indicates the respective authenticator can be contacted over Bluetooth Smart (Bluetooth Low Energy / BLE).
build() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
  Creates a `RequestMatcherDelegatingAuthorizationManager` instance.
build() - Method in class org.springframework.security.web.authentication.RequestMatcherDelegatingAuthenticationManagerResolver.Builder
  Creates a `RequestMatcherDelegatingAuthenticationManagerResolver` instance.
build() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
build() - Method in class org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.Builder
  Creates a `ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver` instance.
build() - Method in class org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager.Builder
build() - Method in class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter.Builder
build() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Builds the `AuthenticatorAssertionResponse`
build() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder
  Builds a `AuthenticatorAssertionResponse`.
build() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder
  Builds a `AuthenticatorSelectionCriteria`
build() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
build() - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder
  Builds a new `PublicKeyCredentialUserEntity`
build() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Creates a new `PublicKeyCredential`
build() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Builds a new `PublicKeyCredentialCreationOptions`
build() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder
  Create a new `PublicKeyCredentialDescriptor`
build() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Builds a new `PublicKeyCredentialRequestOptions`
build() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity.PublicKeyCredentialRpEntityBuilder
  Creates a new `PublicKeyCredentialRpEntity`.
buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
  Builds the authentication details object.
buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource
buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.WebAuthenticationDetailsSource
builder() - Static method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager
  Creates a builder for `RequestMatcherDelegatingAuthorizationManager`.
builder() - Static method in class org.springframework.security.web.authentication.RequestMatcherDelegatingAuthenticationManagerResolver
  Creates a builder for `RequestMatcherDelegatingAuthorizationManager`.
builder() - Static method in class org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver
  Creates a builder for `RequestMatcherDelegatingAuthorizationManager`.
builder() - Static method in class org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager
builder() - Static method in class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter
builder() - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse
  Creates a new `AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse
  Creates a new instance.
builder() - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria
  Creates a new `AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
builder() - Static method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity
  Create a new `ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  Creates a new `PublicKeyCredential.PublicKeyCredentialBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  Creates a new `PublicKeyCredentialCreationOptions`
builder() - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor
  Creates a new `PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  Creates a `PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder`
builder() - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity
  Creates a new `PublicKeyCredentialRpEntity.PublicKeyCredentialRpEntityBuilder`
Builder() - Constructor for class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
Builder() - Constructor for class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
Builder() - Constructor for class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter.Builder
Builder(HandlerMappingIntrospector) - Constructor for class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher.Builder
  Construct a new instance of this builder
buildFullRequestUrl(HttpServletRequest) - Static method in class org.springframework.security.web.util.UrlUtils
buildFullRequestUrl(String, String, int, String, String) - Static method in class org.springframework.security.web.util.UrlUtils
  Obtains the full URL the client used to make the request.
buildHttpsRedirectUrlForRequest(HttpServletRequest) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
  Builds a URL to redirect the supplied request to HTTPS.
buildRedirectUrlToLoginPage(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
buildRequestUrl(HttpServletRequest) - Static method in class org.springframework.security.web.util.UrlUtils
  Obtains the web application-specific fragment of the request URL.
Bytes - Class in org.springframework.security.web.webauthn.api
  An object representation of byte[].
Bytes(byte[]) - Constructor for class org.springframework.security.web.webauthn.api.Bytes
  Creates a new instance

## C

CACHE - Enum constant in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
CACHE - Enum constant in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
CACHE_CONTRTOL_VALUE - Static variable in class org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter
  The value for cache control value
CacheControlHeadersWriter - Class in org.springframework.security.web.header.writers
  Inserts headers to prevent caching if no cache control headers have been specified.
CacheControlHeadersWriter() - Constructor for class org.springframework.security.web.header.writers.CacheControlHeadersWriter
  Creates a new instance
CacheControlServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes cache control related headers.
CacheControlServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter
calculateLoginLifetime(HttpServletRequest, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
  Calculates the validity period in seconds for a newly generated remember-me login.
calculateRedirectUrl(String, String) - Method in class org.springframework.security.web.DefaultRedirectStrategy
cancelCookie(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Sets a "cancel cookie" (with maxAge = 0) on the response to disable persistent logins.
challenge(Bytes) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getChallenge()` property.
challenge(Bytes) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getChallenge()` property.
ChangeSessionIdAuthenticationStrategy - Class in org.springframework.security.web.authentication.session
  Uses `HttpServletRequest.changeSessionId()` to protect against session fixation attacks.
ChangeSessionIdAuthenticationStrategy() - Constructor for class org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy
ChannelDecisionManager - Interface in org.springframework.security.web.access.channel
  Decides whether a web channel provides sufficient security.
ChannelDecisionManagerImpl - Class in org.springframework.security.web.access.channel
  Implementation of `ChannelDecisionManager`.
ChannelDecisionManagerImpl() - Constructor for class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
ChannelEntryPoint - Interface in org.springframework.security.web.access.channel
  May be used by a `ChannelProcessor` to launch a web channel.
ChannelProcessingFilter - Class in org.springframework.security.web.access.channel
  Ensures a web request is delivered over the required channel.
ChannelProcessingFilter() - Constructor for class org.springframework.security.web.access.channel.ChannelProcessingFilter
ChannelProcessor - Interface in org.springframework.security.web.access.channel
  Decides whether a web channel meets a specific security condition.
check(String) - Method in class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiPasswordChecker
check(String) - Method in class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiReactivePasswordChecker
check(Supplier<Authentication>, HttpServletRequest) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager
  Deprecated.
  please use `AuthorizationManager.authorize(Supplier, Object)` instead
check(Supplier<Authentication>, RequestAuthorizationContext) - Method in class org.springframework.security.web.access.expression.WebExpressionAuthorizationManager
  Determines the access by evaluating the provided expression.
check(Supplier<Authentication>, RequestAuthorizationContext) - Method in class org.springframework.security.web.access.IpAddressAuthorizationManager
check(Mono<Authentication>, AuthorizationContext) - Method in class org.springframework.security.web.server.authorization.IpAddressReactiveAuthorizationManager
check(Mono<Authentication>, ServerWebExchange) - Method in class org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager
  Deprecated.
  please use `ReactiveAuthorizationManager.authorize(Mono, Object)` instead
CLEAR_SITE_DATA_HEADER - Static variable in class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter
clearAuthenticationAttributes(HttpServletRequest) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler
  Removes temporary authentication-related data which may have been stored in the session during the authentication process.
ClearSiteDataHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for Clear Site Data.
ClearSiteDataHeaderWriter(ClearSiteDataHeaderWriter.Directive...) - Constructor for class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter
  Creates a new instance of `ClearSiteDataHeaderWriter` with given sources.
ClearSiteDataHeaderWriter.Directive - Enum Class in org.springframework.security.web.header.writers
  Represents the directive values expected by the `ClearSiteDataHeaderWriter`.
ClearSiteDataServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the `Clear-Site-Data` response header when the request is secure.
ClearSiteDataServerHttpHeadersWriter(ClearSiteDataServerHttpHeadersWriter.Directive...) - Constructor for class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter
  Constructs a new instance using the given directives.
ClearSiteDataServerHttpHeadersWriter.Directive - Enum Class in org.springframework.security.web.server.header
  Represents the directive values expected by the `ClearSiteDataServerHttpHeadersWriter`
clientDataJSON(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Set the `AuthenticatorResponse.getClientDataJSON()` property
clientDataJSON(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder
  Sets the `AuthenticatorResponse.getClientDataJSON()` property.
clientExtensionResults(AuthenticationExtensionsClientOutputs) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getClientExtensionResults()` property.
commence(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
commence(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.access.channel.ChannelEntryPoint
  Commences a secure channel.
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.Http403ForbiddenEntryPoint
  Always returns a 403 error code to the client.
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.HttpStatusEntryPoint
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
  Performs the redirect (or forward) to the login form URL.
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.NoOpAuthenticationEntryPoint
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in interface org.springframework.security.web.AuthenticationEntryPoint
  Commences an authentication scheme.
commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.web.server.authentication.HttpBasicServerAuthenticationEntryPoint
commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.web.server.authentication.HttpStatusServerEntryPoint
commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationEntryPoint
commence(ServerWebExchange, AuthenticationException) - Method in class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint
commence(ServerWebExchange, AuthenticationException) - Method in interface org.springframework.security.web.server.ServerAuthenticationEntryPoint
  Initiates the authentication flow
CompositeAccessDeniedHandler - Class in org.springframework.security.web.access
CompositeAccessDeniedHandler(Collection<AccessDeniedHandler>) - Constructor for class org.springframework.security.web.access.CompositeAccessDeniedHandler
CompositeAccessDeniedHandler(AccessDeniedHandler...) - Constructor for class org.springframework.security.web.access.CompositeAccessDeniedHandler
CompositeHeaderWriter - Class in org.springframework.security.web.header.writers
  A `HeaderWriter` that delegates to several other `HeaderWriter`s.
CompositeHeaderWriter(List<HeaderWriter>) - Constructor for class org.springframework.security.web.header.writers.CompositeHeaderWriter
  Creates a new instance.
CompositeLogoutHandler - Class in org.springframework.security.web.authentication.logout
  Performs a logout through all the `LogoutHandler` implementations.
CompositeLogoutHandler(List<LogoutHandler>) - Constructor for class org.springframework.security.web.authentication.logout.CompositeLogoutHandler
CompositeLogoutHandler(LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.CompositeLogoutHandler
CompositeRequestRejectedHandler - Class in org.springframework.security.web.firewall
  A `RequestRejectedHandler` that delegates to several other `RequestRejectedHandler`s.
CompositeRequestRejectedHandler(RequestRejectedHandler...) - Constructor for class org.springframework.security.web.firewall.CompositeRequestRejectedHandler
  Creates a new instance.
CompositeServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Combines multiple `ServerHttpHeadersWriter` instances into a single instance.
CompositeServerHttpHeadersWriter(List<ServerHttpHeadersWriter>) - Constructor for class org.springframework.security.web.server.header.CompositeServerHttpHeadersWriter
CompositeServerHttpHeadersWriter(ServerHttpHeadersWriter...) - Constructor for class org.springframework.security.web.server.header.CompositeServerHttpHeadersWriter
CompositeSessionAuthenticationStrategy - Class in org.springframework.security.web.authentication.session
  A `SessionAuthenticationStrategy` that accepts multiple `SessionAuthenticationStrategy` implementations to delegate to.
CompositeSessionAuthenticationStrategy(List<SessionAuthenticationStrategy>) - Constructor for class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy
ConcurrentSessionControlAuthenticationStrategy - Class in org.springframework.security.web.authentication.session
  Strategy which handles concurrent session-control.
ConcurrentSessionControlAuthenticationStrategy(SessionRegistry) - Constructor for class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
ConcurrentSessionControlServerAuthenticationSuccessHandler - Class in org.springframework.security.web.server.authentication
  Controls the number of sessions a user can have concurrently authenticated in an application.
ConcurrentSessionControlServerAuthenticationSuccessHandler(ReactiveSessionRegistry, ServerMaximumSessionsExceededHandler) - Constructor for class org.springframework.security.web.server.authentication.ConcurrentSessionControlServerAuthenticationSuccessHandler
ConcurrentSessionFilter - Class in org.springframework.security.web.session
  Filter required by concurrent session handling package.
ConcurrentSessionFilter(SessionRegistry) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter
ConcurrentSessionFilter(SessionRegistry, String) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter
  Deprecated.
  use `ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)` with `SimpleRedirectSessionInformationExpiredStrategy` instead.
ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter
containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.DelegatingSecurityContextRepository
containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.NullSecurityContextRepository
containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
containsContext(HttpServletRequest) - Method in interface org.springframework.security.web.context.SecurityContextRepository
  Allows the repository to be queried as to whether it contains a security context for the current request.
CONTENT_SECURITY_POLICY - Static variable in class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
CONTENT_SECURITY_POLICY_REPORT_ONLY - Static variable in class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
ContentSecurityPolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for Content Security Policy (CSP) Level 2.
ContentSecurityPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
  Creates a new instance.
ContentSecurityPolicyHeaderWriter(String) - Constructor for class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
  Creates a new instance
ContentSecurityPolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the `Content-Security-Policy` response header with configured policy directives.
ContentSecurityPolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
ContentTypeOptionsServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Adds X-Content-Type-Options: nosniff
ContentTypeOptionsServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter
convert(HttpServletRequest) - Method in interface org.springframework.security.web.authentication.AuthenticationConverter
convert(HttpServletRequest) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationConverter
convert(HttpServletRequest) - Method in class org.springframework.security.web.authentication.ott.OneTimeTokenAuthenticationConverter
convert(HttpServletRequest) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
convert(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationConverter
convert(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.ott.ServerOneTimeTokenAuthenticationConverter
convert(ServerWebExchange) - Method in interface org.springframework.security.web.server.authentication.ServerAuthenticationConverter
  Converts a `ServerWebExchange` to an `Authentication`
convert(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.ServerFormLoginAuthenticationConverter
convert(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.ServerHttpBasicAuthenticationConverter
convert(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.ServerX509AuthenticationConverter
CookieClearingLogoutHandler - Class in org.springframework.security.web.authentication.logout
  A logout handler which clears either - A defined list of cookie names, using the context path as the cookie path OR - A given list of Cookies
CookieClearingLogoutHandler(Cookie...) - Constructor for class org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler
CookieClearingLogoutHandler(String...) - Constructor for class org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler
CookieCsrfTokenRepository - Class in org.springframework.security.web.csrf
  A `CsrfTokenRepository` that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.
CookieCsrfTokenRepository() - Constructor for class org.springframework.security.web.csrf.CookieCsrfTokenRepository
CookieRequestCache - Class in org.springframework.security.web.savedrequest
  An Implementation of `RequestCache` which saves the original request URI in a cookie.
CookieRequestCache() - Constructor for class org.springframework.security.web.savedrequest.CookieRequestCache
COOKIES - Enum constant in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
COOKIES - Enum constant in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
CookieServerCsrfTokenRepository - Class in org.springframework.security.web.server.csrf
  A `ServerCsrfTokenRepository` that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.
CookieServerCsrfTokenRepository() - Constructor for class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
CookieServerRequestCache - Class in org.springframework.security.web.server.savedrequest
  An implementation of `ServerRequestCache` that saves the requested URI in a cookie.
CookieServerRequestCache() - Constructor for class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
CookieTheftException - Exception in org.springframework.security.web.authentication.rememberme
CookieTheftException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.CookieTheftException
COSEAlgorithmIdentifier - Class in org.springframework.security.web.webauthn.api
  COSEAlgorithmIdentifier is used to identify a cryptographic algorithm.
CREATE_TABLE_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  Default SQL for creating the database table to store the tokens
createAuthentication(HttpServletRequest) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
createAuthentication(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.AnonymousAuthenticationWebFilter
createCredentialRequestOptions(PublicKeyCredentialRequestOptionsRequest) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
createCredentialRequestOptions(PublicKeyCredentialRequestOptionsRequest) - Method in interface org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations
  Creates the `PublicKeyCredentialRequestOptions` used to authenticate a user.
created(Instant) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
createELContext(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ELRequestMatcher
  Subclasses can override this methode if they want to use a different EL root context
createEvaluationContext(Supplier<Authentication>, RequestAuthorizationContext) - Method in class org.springframework.security.web.access.expression.DefaultHttpSecurityExpressionHandler
createNewToken(PersistentRememberMeToken) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl
createNewToken(PersistentRememberMeToken) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
createNewToken(PersistentRememberMeToken) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository
createPublicKeyCredentialCreationOptions(PublicKeyCredentialCreationOptionsRequest) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
createPublicKeyCredentialCreationOptions(PublicKeyCredentialCreationOptionsRequest) - Method in interface org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations
  Creates the `PublicKeyCredentialCreationOptions` used to register new credentials.
createSecurityExpressionRoot(Authentication, RequestAuthorizationContext) - Method in class org.springframework.security.web.access.expression.DefaultHttpSecurityExpressionHandler
createSecurityExpressionRoot(Authentication, FilterInvocation) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler
createSuccessfulAuthentication(HttpServletRequest, UserDetails) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Creates the final `Authentication` object returned from the `autoLogin` method.
createUserDetails(Authentication, Collection<? extends GrantedAuthority>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService
  Creates the final `UserDetails` object.
credentialId(Bytes) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
CredentialPropertiesOutput - Class in org.springframework.security.web.webauthn.api
  CredentialPropertiesOutput is the Client extension output.
CredentialPropertiesOutput(boolean) - Constructor for class org.springframework.security.web.webauthn.api.CredentialPropertiesOutput
  Creates a new instance.
CredentialPropertiesOutput.ExtensionOutput - Class in org.springframework.security.web.webauthn.api
  The output for `CredentialPropertiesOutput`
CredentialRecord - Interface in org.springframework.security.web.webauthn.api
  Represents a Credential Record that is stored by the Relying Party after successful registration.
credentialType(PublicKeyCredentialType) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
credProps - Static variable in class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInput
  https://www.w3.org/TR/webauthn-3/#sctn-authenticator-credential-properties-extension
CredProtect(CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy, boolean) - Constructor for class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect
CredProtectAuthenticationExtensionsClientInput - Class in org.springframework.security.web.webauthn.api
  Implements Credential Protection (credProtect).
CredProtectAuthenticationExtensionsClientInput(CredProtectAuthenticationExtensionsClientInput.CredProtect) - Constructor for class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput
CredProtectAuthenticationExtensionsClientInput.CredProtect - Class in org.springframework.security.web.webauthn.api
CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy - Enum Class in org.springframework.security.web.webauthn.api
CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
CROSS_PLATFORM - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
  Indicates cross-platform attachment.
CrossOriginEmbedderPolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Inserts Cross-Origin-Embedder-Policy header.
CrossOriginEmbedderPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter
CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy - Enum Class in org.springframework.security.web.header.writers
CrossOriginEmbedderPolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Inserts Cross-Origin-Embedder-Policy headers.
CrossOriginEmbedderPolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter
CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy - Enum Class in org.springframework.security.web.server.header
CrossOriginOpenerPolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Inserts the Cross-Origin-Opener-Policy header
CrossOriginOpenerPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter
CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy - Enum Class in org.springframework.security.web.header.writers
CrossOriginOpenerPolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Inserts Cross-Origin-Opener-Policy header.
CrossOriginOpenerPolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter
CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy - Enum Class in org.springframework.security.web.server.header
CrossOriginResourcePolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Inserts Cross-Origin-Resource-Policy header
CrossOriginResourcePolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter
CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy - Enum Class in org.springframework.security.web.header.writers
CrossOriginResourcePolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Inserts Cross-Origin-Resource-Policy headers.
CrossOriginResourcePolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter
CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy - Enum Class in org.springframework.security.web.server.header
CsrfAuthenticationStrategy - Class in org.springframework.security.web.csrf
  `CsrfAuthenticationStrategy` is in charge of removing the `CsrfToken` upon authenticating.
CsrfAuthenticationStrategy(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfAuthenticationStrategy
  Creates a new instance
CsrfException - Exception in org.springframework.security.web.csrf
  Thrown when an invalid or missing `CsrfToken` is found in the HttpServletRequest
CsrfException - Exception in org.springframework.security.web.server.csrf
  Thrown when an invalid or missing `CsrfToken` is found in the HttpServletRequest
CsrfException(String) - Constructor for exception org.springframework.security.web.csrf.CsrfException
CsrfException(String) - Constructor for exception org.springframework.security.web.server.csrf.CsrfException
CsrfFilter - Class in org.springframework.security.web.csrf
  Applies CSRF protection using a synchronizer token pattern.
CsrfFilter(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfFilter
  Creates a new instance.
CsrfLogoutHandler - Class in org.springframework.security.web.csrf
  `CsrfLogoutHandler` is in charge of removing the `CsrfToken` upon logout.
CsrfLogoutHandler(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfLogoutHandler
  Creates a new instance
CsrfRequestDataValueProcessor - Class in org.springframework.security.web.reactive.result.view
CsrfRequestDataValueProcessor - Class in org.springframework.security.web.servlet.support.csrf
  Integration with Spring Web MVC that automatically adds the `CsrfToken` into forms with hidden inputs when using Spring tag libraries.
CsrfRequestDataValueProcessor() - Constructor for class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
CsrfRequestDataValueProcessor() - Constructor for class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
CsrfServerLogoutHandler - Class in org.springframework.security.web.server.csrf
  `CsrfServerLogoutHandler` is in charge of removing the `CsrfToken` upon logout.
CsrfServerLogoutHandler(ServerCsrfTokenRepository) - Constructor for class org.springframework.security.web.server.csrf.CsrfServerLogoutHandler
  Creates a new instance
CsrfToken - Interface in org.springframework.security.web.csrf
  Provides the information about an expected CSRF token.
CsrfToken - Interface in org.springframework.security.web.server.csrf
CsrfTokenArgumentResolver - Class in org.springframework.security.web.method.annotation
  Allows resolving the current `CsrfToken`.
CsrfTokenArgumentResolver() - Constructor for class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver
CsrfTokenRepository - Interface in org.springframework.security.web.csrf
  An API to allow changing the method in which the expected `CsrfToken` is associated to the `HttpServletRequest`.
CsrfTokenRequestAttributeHandler - Class in org.springframework.security.web.csrf
  An implementation of the `CsrfTokenRequestHandler` interface that is capable of making the `CsrfToken` available as a request attribute and resolving the token value as either a header or parameter value of the request.
CsrfTokenRequestAttributeHandler() - Constructor for class org.springframework.security.web.csrf.CsrfTokenRequestAttributeHandler
CsrfTokenRequestHandler - Interface in org.springframework.security.web.csrf
  A callback interface that is used to make the `CsrfToken` created by the `CsrfTokenRepository` available as a request attribute.
CsrfTokenRequestResolver - Interface in org.springframework.security.web.csrf
  Implementations of this interface are capable of resolving the token value of a `CsrfToken` from the provided `HttpServletRequest`.
CsrfWebFilter - Class in org.springframework.security.web.server.csrf
  Applies CSRF protection using a synchronizer token pattern.
CsrfWebFilter() - Constructor for class org.springframework.security.web.server.csrf.CsrfWebFilter
css() - Static method in class org.springframework.security.web.authentication.ui.DefaultResourcesFilter
  Create an instance of `DefaultResourcesFilter` serving Spring Security's default CSS stylesheet.
css() - Static method in class org.springframework.security.web.server.ui.DefaultResourcesWebFilter
  Create an instance of `DefaultResourcesWebFilter` serving Spring Security's default CSS stylesheet.
currentDate - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Current formatted date.
currentDateGenerated - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Instant on which the currentDate object was generated.
CurrentSecurityContextArgumentResolver - Class in org.springframework.security.web.method.annotation
  Allows resolving the `SecurityContext` using the `CurrentSecurityContext` annotation.
CurrentSecurityContextArgumentResolver - Class in org.springframework.security.web.reactive.result.method.annotation
  Resolves the `SecurityContext`
CurrentSecurityContextArgumentResolver() - Constructor for class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
CurrentSecurityContextArgumentResolver(ReactiveAdapterRegistry) - Constructor for class org.springframework.security.web.reactive.result.method.annotation.CurrentSecurityContextArgumentResolver
customize(Consumer<PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Allows customizing the builder using the `Consumer` that is passed in.
customize(Consumer<PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Allows customizing the `PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder`

## D

DebugFilter - Class in org.springframework.security.web.debug
  Spring Security debugging filter.
DebugFilter(FilterChainProxy) - Constructor for class org.springframework.security.web.debug.DebugFilter
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager
  Decided whether the presented `FilterInvocation` provides the appropriate level of channel security based on the requested list of `ConfigAttribute`s.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor
  Decided whether the presented `FilterInvocation` provides the appropriate level of channel security based on the requested list of `ConfigAttribute`s.
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
decodeCookie(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Decodes the cookie and splits it into a set of token strings using the ":" delimiter.
decorate(FilterChain) - Method in interface org.springframework.security.web.FilterChainProxy.FilterChainDecorator
  Provide a new `FilterChain` that accounts for needed security considerations when there are no security filters.
decorate(FilterChain) - Method in class org.springframework.security.web.FilterChainProxy.VirtualFilterChainDecorator
  Provide a new `FilterChain` that accounts for needed security considerations when there are no security filters.
decorate(FilterChain) - Method in class org.springframework.security.web.ObservationFilterChainDecorator
decorate(FilterChain, List<Filter>) - Method in interface org.springframework.security.web.FilterChainProxy.FilterChainDecorator
  Provide a new `FilterChain` that accounts for the provided filters as well as the original filter chain.
decorate(FilterChain, List<Filter>) - Method in class org.springframework.security.web.FilterChainProxy.VirtualFilterChainDecorator
  Provide a new `FilterChain` that accounts for the provided filters as well as the original filter chain.
decorate(FilterChain, List<Filter>) - Method in class org.springframework.security.web.ObservationFilterChainDecorator
decorate(WebFilterChain) - Method in class org.springframework.security.web.server.ObservationWebFilterChainDecorator
decorate(WebFilterChain) - Method in class org.springframework.security.web.server.WebFilterChainProxy.DefaultWebFilterChainDecorator
  Provide a new `WebFilterChain` that accounts for needed security considerations when there are no security filters.
decorate(WebFilterChain) - Method in interface org.springframework.security.web.server.WebFilterChainProxy.WebFilterChainDecorator
  Provide a new `WebFilterChain` that accounts for needed security considerations when there are no security filters.
decorate(WebFilterChain, List<WebFilter>) - Method in class org.springframework.security.web.server.ObservationWebFilterChainDecorator
decorate(WebFilterChain, List<WebFilter>) - Method in class org.springframework.security.web.server.WebFilterChainProxy.DefaultWebFilterChainDecorator
  Provide a new `WebFilterChain` that accounts for the provided filters as well as the original filter chain.
decorate(WebFilterChain, List<WebFilter>) - Method in interface org.springframework.security.web.server.WebFilterChainProxy.WebFilterChainDecorator
  Provide a new `WebFilterChain` that accounts for the provided filters as well as the original filter chain.
DEF_INSERT_TOKEN_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  The default SQL used by `createNewToken`
DEF_REMOVE_USER_TOKENS_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  The default SQL used by `removeUserTokens`
DEF_TOKEN_BY_SERIES_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  The default SQL used by the `getTokenBySeries` query
DEF_UPDATE_TOKEN_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  The default SQL used by `updateToken`
DEFAULT_CSRF_ATTR_NAME - Static variable in class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
  The default request attribute to look for a `CsrfToken`.
DEFAULT_CSRF_MATCHER - Static variable in class org.springframework.security.web.csrf.CsrfFilter
  The default `RequestMatcher` that indicates if CSRF protection is required or not.
DEFAULT_CSRF_MATCHER - Static variable in class org.springframework.security.web.server.csrf.CsrfWebFilter
DEFAULT_EXTRACTOR - Static variable in class org.springframework.security.web.util.ThrowableAnalyzer
  Default extractor for `Throwable` instances.
DEFAULT_FILTER_NAME - Static variable in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
DEFAULT_LOGIN_PAGE_URL - Static variable in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
DEFAULT_LOGOUT_SUCCESS_URL - Static variable in class org.springframework.security.web.server.authentication.logout.RedirectServerLogoutSuccessHandler
DEFAULT_PARAMETER - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
DEFAULT_REQUEST_ATTR_NAME - Static variable in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
  The default request attribute name to use.
DEFAULT_SERIES_LENGTH - Static variable in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
DEFAULT_SPRING_SECURITY_CONTEXT_ATTR_NAME - Static variable in class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
  The default session attribute name to save and load the `SecurityContext`
DEFAULT_TOKEN_LENGTH - Static variable in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
DefaultCsrfToken - Class in org.springframework.security.web.csrf
  A CSRF token that is used to protect against CSRF attacks.
DefaultCsrfToken - Class in org.springframework.security.web.server.csrf
  A CSRF token that is used to protect against CSRF attacks.
DefaultCsrfToken(String, String, String) - Constructor for class org.springframework.security.web.csrf.DefaultCsrfToken
  Creates a new instance
DefaultCsrfToken(String, String, String) - Constructor for class org.springframework.security.web.server.csrf.DefaultCsrfToken
  Creates a new instance
DefaultFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.intercept
  Default implementation of `FilterInvocationDefinitionSource`.
DefaultFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>) - Constructor for class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
  Sets the internal request map from the supplied map.
DefaultHttpFirewall - Class in org.springframework.security.web.firewall
  User's should consider using `StrictHttpFirewall` because rather than trying to sanitize a malicious URL it rejects the malicious URL providing better security guarantees.
DefaultHttpFirewall() - Constructor for class org.springframework.security.web.firewall.DefaultHttpFirewall
DefaultHttpSecurityExpressionHandler - Class in org.springframework.security.web.access.expression
  A `SecurityExpressionHandler` that uses a `RequestAuthorizationContext` to create a `WebSecurityExpressionRoot`.
DefaultHttpSecurityExpressionHandler() - Constructor for class org.springframework.security.web.access.expression.DefaultHttpSecurityExpressionHandler
DefaultLoginPageGeneratingFilter - Class in org.springframework.security.web.authentication.ui
  For internal use with namespace configuration in the case where a user doesn't configure a login page.
DefaultLoginPageGeneratingFilter() - Constructor for class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
DefaultLoginPageGeneratingFilter(UsernamePasswordAuthenticationFilter) - Constructor for class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
DefaultLogoutPageGeneratingFilter - Class in org.springframework.security.web.authentication.ui
  Generates a default log out page.
DefaultLogoutPageGeneratingFilter() - Constructor for class org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter
DefaultOneTimeTokenSubmitPageGeneratingFilter - Class in org.springframework.security.web.authentication.ui
  Creates a default one-time token submit page.
DefaultOneTimeTokenSubmitPageGeneratingFilter() - Constructor for class org.springframework.security.web.authentication.ui.DefaultOneTimeTokenSubmitPageGeneratingFilter
DefaultRedirectStrategy - Class in org.springframework.security.web
  Simple implementation of `RedirectStrategy` which is the default used throughout the framework.
DefaultRedirectStrategy() - Constructor for class org.springframework.security.web.DefaultRedirectStrategy
DefaultRequestRejectedHandler - Class in org.springframework.security.web.firewall
  Default implementation of `RequestRejectedHandler` that simply rethrows the exception.
DefaultRequestRejectedHandler() - Constructor for class org.springframework.security.web.firewall.DefaultRequestRejectedHandler
DefaultResourcesFilter - Class in org.springframework.security.web.authentication.ui
  Serve common static assets used in default UIs, such as CSS or Javascript files.
DefaultResourcesWebFilter - Class in org.springframework.security.web.server.ui
  Serve common static assets used in default UIs, such as CSS or Javascript files.
DefaultSavedRequest - Class in org.springframework.security.web.savedrequest
  Represents central information from a `HttpServletRequest`.
DefaultSavedRequest(HttpServletRequest, PortResolver) - Constructor for class org.springframework.security.web.savedrequest.DefaultSavedRequest
DefaultSavedRequest(HttpServletRequest, PortResolver, String) - Constructor for class org.springframework.security.web.savedrequest.DefaultSavedRequest
DefaultSavedRequest.Builder - Class in org.springframework.security.web.savedrequest
DefaultSecurityFilterChain - Class in org.springframework.security.web
  Standard implementation of `SecurityFilterChain`.
DefaultSecurityFilterChain(RequestMatcher, Filter...) - Constructor for class org.springframework.security.web.DefaultSecurityFilterChain
DefaultSecurityFilterChain(RequestMatcher, List<Filter>) - Constructor for class org.springframework.security.web.DefaultSecurityFilterChain
DefaultServerRedirectStrategy - Class in org.springframework.security.web.server
  The default `ServerRedirectStrategy` to use.
DefaultServerRedirectStrategy() - Constructor for class org.springframework.security.web.server.DefaultServerRedirectStrategy
DefaultWebAuthnRegistrationPageGeneratingFilter - Class in org.springframework.security.web.webauthn.registration
  A `Filter` that renders a default WebAuthn registration page.
DefaultWebAuthnRegistrationPageGeneratingFilter(PublicKeyCredentialUserEntityRepository, UserCredentialRepository) - Constructor for class org.springframework.security.web.webauthn.registration.DefaultWebAuthnRegistrationPageGeneratingFilter
  Creates a new instance.
DefaultWebFilterChainDecorator() - Constructor for class org.springframework.security.web.server.WebFilterChainProxy.DefaultWebFilterChainDecorator
DefaultWebInvocationPrivilegeEvaluator - Class in org.springframework.security.web.access
  Deprecated.
  Use `AuthorizationManagerWebInvocationPrivilegeEvaluator` instead
DefaultWebInvocationPrivilegeEvaluator(AbstractSecurityInterceptor) - Constructor for class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator
  Deprecated.
DefaultWebSecurityExpressionHandler - Class in org.springframework.security.web.access.expression
DefaultWebSecurityExpressionHandler() - Constructor for class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler
DeferredCsrfToken - Interface in org.springframework.security.web.csrf
  An interface that allows delayed access to a `CsrfToken` that may be generated.
DelegateEntry(ServerWebExchangeMatcher, ServerAccessDeniedHandler) - Constructor for class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry
DelegateEntry(ServerWebExchangeMatcher, ServerAuthenticationEntryPoint) - Constructor for class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint.DelegateEntry
DelegatingAccessDeniedHandler - Class in org.springframework.security.web.access
  An `AccessDeniedHandler` that delegates to other `AccessDeniedHandler` instances based upon the type of `AccessDeniedException` passed into `DelegatingAccessDeniedHandler.handle(HttpServletRequest, HttpServletResponse, AccessDeniedException)`.
DelegatingAccessDeniedHandler(LinkedHashMap<Class<? extends AccessDeniedException>, AccessDeniedHandler>, AccessDeniedHandler) - Constructor for class org.springframework.security.web.access.DelegatingAccessDeniedHandler
  Creates a new instance
DelegatingAuthenticationConverter - Class in org.springframework.security.web.authentication
  A `AuthenticationConverter`, that iterates over multiple `AuthenticationConverter`.
DelegatingAuthenticationConverter(List<AuthenticationConverter>) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationConverter
DelegatingAuthenticationConverter(AuthenticationConverter...) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationConverter
DelegatingAuthenticationEntryPoint - Class in org.springframework.security.web.authentication
  An `AuthenticationEntryPoint` which selects a concrete `AuthenticationEntryPoint` based on a `RequestMatcher` evaluation.
DelegatingAuthenticationEntryPoint(LinkedHashMap<RequestMatcher, AuthenticationEntryPoint>) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint
DelegatingAuthenticationFailureHandler - Class in org.springframework.security.web.authentication
  An `AuthenticationFailureHandler` that delegates to other `AuthenticationFailureHandler` instances based upon the type of `AuthenticationException` passed into `DelegatingAuthenticationFailureHandler.onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException)` .
DelegatingAuthenticationFailureHandler(LinkedHashMap<Class<? extends AuthenticationException>, AuthenticationFailureHandler>, AuthenticationFailureHandler) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationFailureHandler
  Creates a new instance
DelegatingLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout
  Delegates to logout handlers based on matched request matchers
DelegatingLogoutSuccessHandler(LinkedHashMap<RequestMatcher, LogoutSuccessHandler>) - Constructor for class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler
DelegatingReactiveAuthorizationManager - Class in org.springframework.security.web.server.authorization
DelegatingReactiveAuthorizationManager.Builder - Class in org.springframework.security.web.server.authorization
DelegatingRequestMatcherHeaderWriter - Class in org.springframework.security.web.header.writers
  Delegates to the provided `HeaderWriter` when `RequestMatcher.matches(HttpServletRequest)` returns true.
DelegatingRequestMatcherHeaderWriter(RequestMatcher, HeaderWriter) - Constructor for class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter
  Creates a new instance
DelegatingSecurityContextRepository - Class in org.springframework.security.web.context
DelegatingSecurityContextRepository(List<SecurityContextRepository>) - Constructor for class org.springframework.security.web.context.DelegatingSecurityContextRepository
DelegatingSecurityContextRepository(SecurityContextRepository...) - Constructor for class org.springframework.security.web.context.DelegatingSecurityContextRepository
DelegatingServerAuthenticationConverter - Class in org.springframework.security.web.server.authentication
  A `ServerAuthenticationConverter` that delegates to other `ServerAuthenticationConverter` instances.
DelegatingServerAuthenticationConverter(List<ServerAuthenticationConverter>) - Constructor for class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationConverter
DelegatingServerAuthenticationConverter(ServerAuthenticationConverter...) - Constructor for class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationConverter
DelegatingServerAuthenticationEntryPoint - Class in org.springframework.security.web.server
  A `ServerAuthenticationEntryPoint` which delegates to multiple `ServerAuthenticationEntryPoint` based on a `ServerWebExchangeMatcher`
DelegatingServerAuthenticationEntryPoint(List<DelegatingServerAuthenticationEntryPoint.DelegateEntry>) - Constructor for class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint
DelegatingServerAuthenticationEntryPoint(DelegatingServerAuthenticationEntryPoint.DelegateEntry...) - Constructor for class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint
DelegatingServerAuthenticationEntryPoint.DelegateEntry - Class in org.springframework.security.web.server
DelegatingServerAuthenticationSuccessHandler - Class in org.springframework.security.web.server.authentication
  Delegates to a collection of `ServerAuthenticationSuccessHandler` implementations.
DelegatingServerAuthenticationSuccessHandler(List<ServerAuthenticationSuccessHandler>) - Constructor for class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationSuccessHandler
  Creates a new instance with the provided list of delegates
DelegatingServerAuthenticationSuccessHandler(ServerAuthenticationSuccessHandler...) - Constructor for class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationSuccessHandler
DelegatingServerLogoutHandler - Class in org.springframework.security.web.server.authentication.logout
  Delegates to a collection of `ServerLogoutHandler` implementations.
DelegatingServerLogoutHandler(Collection<ServerLogoutHandler>) - Constructor for class org.springframework.security.web.server.authentication.logout.DelegatingServerLogoutHandler
DelegatingServerLogoutHandler(ServerLogoutHandler...) - Constructor for class org.springframework.security.web.server.authentication.logout.DelegatingServerLogoutHandler
delete(Bytes) - Method in class org.springframework.security.web.webauthn.management.MapPublicKeyCredentialUserEntityRepository
delete(Bytes) - Method in class org.springframework.security.web.webauthn.management.MapUserCredentialRepository
delete(Bytes) - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository
delete(Bytes) - Method in interface org.springframework.security.web.webauthn.management.UserCredentialRepository
  Deletes an entry by credential id
DENY - Enum constant in enum class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode
DENY - Enum constant in enum class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode
  A browser receiving content with this header field MUST NOT display this content in any frame.
denyAll() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are not allowed by anyone.
destroy() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
  Not used (we rely on IoC container lifecycle services instead)
destroy() - Method in class org.springframework.security.web.debug.DebugFilter
determineCauseChain(Throwable) - Method in class org.springframework.security.web.util.ThrowableAnalyzer
  Determines the cause chain of the provided `Throwable`.
determineExpiredUrl(HttpServletRequest, SessionInformation) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
  Deprecated.
  Use `ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)` instead.
determineTargetUrl(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Builds the target URL according to the logic defined in the main class Javadoc.
determineTargetUrl(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Builds the target URL according to the logic defined in the main class Javadoc
determineUrlToUseForThisRequest(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
  Allows subclasses to modify the login form URL that should be applicable for a given request.
DigestAuthenticationEntryPoint - Class in org.springframework.security.web.authentication.www
  Used by the `SecurityEnforcementFilter` to commence authentication via the `DigestAuthenticationFilter`.
DigestAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
DigestAuthenticationFilter - Class in org.springframework.security.web.authentication.www
  Processes a HTTP request's Digest authorization headers, putting the result into the `SecurityContextHolder`.
DigestAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
DIRECT - Static variable in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  The direct preference indicates that the Relying Party wants to receive the attestation statement as generated by the authenticator.
DISABLED - Enum constant in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
DISABLED - Enum constant in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
DisableEncodeUrlFilter - Class in org.springframework.security.web.session
  Disables encoding URLs using the `HttpServletResponse` to prevent including the session id in URLs which is not considered URL because the session id can be leaked in things like HTTP access logs.
DisableEncodeUrlFilter() - Constructor for class org.springframework.security.web.session.DisableEncodeUrlFilter
disableOnResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Invoke this method to disable invoking `OnCommittedResponseWrapper.onResponseCommitted()` when the `HttpServletResponse` is committed.
disableSaveOnResponseCommitted() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
  Invoke this method to disable automatic saving of the `SecurityContext` when the `HttpServletResponse` is committed.
DISCOURAGED - Static variable in class org.springframework.security.web.webauthn.api.ResidentKeyRequirement
  The discouraged requirement indicates that the Relying Party prefers creating a server-side credential, but will accept a client-side discoverable credential.
DISCOURAGED - Static variable in class org.springframework.security.web.webauthn.api.UserVerificationRequirement
  The discouraged value indicates that the Relying Party does not want user verification employed during the operation (e.g., in the interest of minimizing disruption to the user interaction flow).
DispatcherTypeRequestMatcher - Class in org.springframework.security.web.util.matcher
  Checks the `DispatcherType` to decide whether to match a given request.
DispatcherTypeRequestMatcher(DispatcherType) - Constructor for class org.springframework.security.web.util.matcher.DispatcherTypeRequestMatcher
  Creates an instance which matches requests with the provided `DispatcherType`
DispatcherTypeRequestMatcher(DispatcherType, HttpMethod) - Constructor for class org.springframework.security.web.util.matcher.DispatcherTypeRequestMatcher
  Creates an instance which matches requests with the provided `DispatcherType` and `HttpMethod`
displayName(String) - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder
  Sets the `ImmutablePublicKeyCredentialUserEntity.getDisplayName()` property.
doesRequestMatch(HttpServletRequest, PortResolver) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
  Determines if the current request matches the `DefaultSavedRequest`.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
  Method that is actually called by the filter chain.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Invokes the `requiresAuthentication` method to determine whether the request is for authentication and should be handled by this filter.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Try to authenticate a pre-authenticated user with Spring Security if the user has not yet been authenticated.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ui.DefaultResourcesFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.context.SecurityContextHolderFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.context.SecurityContextPersistenceFilter
  Deprecated.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.debug.DebugFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.FilterChainProxy
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter
  Attempts to obtain and run as a JAAS `Subject` using `JaasApiIntegrationFilter.obtainSubject(ServletRequest)`.
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.savedrequest.RequestCacheAwareFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.session.SessionManagementFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ott.GenerateOneTimeTokenFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ui.DefaultOneTimeTokenSubmitPageGeneratingFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.csrf.CsrfFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.header.HeaderWriterFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.RequestMatcherRedirectFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.session.DisableEncodeUrlFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.session.ForceEagerSessionCreationFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.webauthn.registration.DefaultWebAuthnRegistrationPageGeneratingFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.webauthn.registration.PublicKeyCredentialCreationOptionsFilter
doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.webauthn.registration.WebAuthnRegistrationFilter

## E

EdDSA - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
EdDSA - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
ELRequestMatcher - Class in org.springframework.security.web.util.matcher
  A RequestMatcher implementation which uses a SpEL expression
ELRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.ELRequestMatcher
EMBEDDER_POLICY - Static variable in class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter
ENABLED - Enum constant in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
ENABLED - Enum constant in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
ENABLED_MODE_BLOCK - Enum constant in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
ENABLED_MODE_BLOCK - Enum constant in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
enableHttpSessionEventPublisher() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Override this if `HttpSessionEventPublisher` should be added as a listener.
encodeCookie(String[]) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Inverse operation of decodeCookie.
encodeRedirectURL(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
encodeURL(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
ENTERPRISE - Static variable in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  The enterprise preference indicates that the Relying Party wants to receive an attestation statement that may include uniquely identifying information.
Enumerator<T> - Class in org.springframework.security.web.savedrequest
  Adapter that wraps an `Enumeration` around a Java 2 collection `Iterator`.
Enumerator(Collection<T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values of the specified Collection.
Enumerator(Collection<T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values of the specified Collection.
Enumerator(Iterator<T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values returned by the specified Iterator.
Enumerator(Iterator<T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values returned by the specified Iterator.
Enumerator(Map<?, T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values of the specified Map.
Enumerator(Map<?, T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator
  Return an Enumeration over the values of the specified Map.
equals(Object) - Method in class org.springframework.security.web.access.intercept.RequestKey
equals(Object) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
equals(Object) - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails
equals(Object) - Method in class org.springframework.security.web.header.Header
equals(Object) - Method in class org.springframework.security.web.server.csrf.DefaultCsrfToken
equals(Object) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
equals(Object) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
equals(Object) - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher
equals(Object) - Method in class org.springframework.security.web.webauthn.api.Bytes
ERROR_PARAMETER_NAME - Static variable in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
errorOnInvalidType() - Element in annotation interface org.springframework.security.web.bind.annotation.AuthenticationPrincipal
  Deprecated.
  True if a `ClassCastException` should be thrown when the current `Authentication.getPrincipal()` is the incorrect type.
ES256 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
ES256 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
ES384 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
ES384 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
ES512 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
ES512 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
escapeEntities(String) - Static method in class org.springframework.security.web.util.TextEscapeUtils
eventPublisher - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
ExceptionMappingAuthenticationFailureHandler - Class in org.springframework.security.web.authentication
  Uses the internal map of exceptions types to URLs to determine the destination on authentication failure.
ExceptionMappingAuthenticationFailureHandler() - Constructor for class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler
ExceptionTranslationFilter - Class in org.springframework.security.web.access
  Handles any `AccessDeniedException` and `AuthenticationException` thrown within the filter chain.
ExceptionTranslationFilter(AuthenticationEntryPoint) - Constructor for class org.springframework.security.web.access.ExceptionTranslationFilter
ExceptionTranslationFilter(AuthenticationEntryPoint, RequestCache) - Constructor for class org.springframework.security.web.access.ExceptionTranslationFilter
ExceptionTranslationWebFilter - Class in org.springframework.security.web.server.authorization
ExceptionTranslationWebFilter() - Constructor for class org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter
ExchangeMatcherRedirectWebFilter - Class in org.springframework.security.web.server
  Web filter that redirects requests that match `ServerWebExchangeMatcher` to the specified URL.
ExchangeMatcherRedirectWebFilter(ServerWebExchangeMatcher, String) - Constructor for class org.springframework.security.web.server.ExchangeMatcherRedirectWebFilter
  Create and initialize an instance of the web filter.
excludeCredentials(List<PublicKeyCredentialDescriptor>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getExcludeCredentials()` property.
EXECUTION_CONTEXTS - Enum constant in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
EXECUTION_CONTEXTS - Enum constant in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
exitSwitchUser(WebFilterExchange) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Attempt to exit from an already switched user.
EXPIRES_VALUE - Static variable in class org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter
  The value for expires value
ExpressionBasedFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.expression
  Expression-based `FilterInvocationSecurityMetadataSource`.
ExpressionBasedFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>, SecurityExpressionHandler<FilterInvocation>) - Constructor for class org.springframework.security.web.access.expression.ExpressionBasedFilterInvocationSecurityMetadataSource
EXTENSION_ID - Static variable in class org.springframework.security.web.webauthn.api.CredentialPropertiesOutput
  The extension id.
extensions(AuthenticationExtensionsClientInputs) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getExtensions()` property.
extensions(AuthenticationExtensionsClientInputs) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getExtensions()` property
extractAttributes(HttpSession) - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy
  Called to extract the existing attributes from the session, prior to invalidating it.
extractCause(Throwable) - Method in interface org.springframework.security.web.util.ThrowableCauseExtractor
  Extracts the cause from the provided `Throwable`.
extractPrincipal(X509Certificate) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
extractPrincipal(X509Certificate) - Method in interface org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor
  Returns the principal (usually a String) for the given certificate.
extractRememberMeCookie(HttpServletRequest) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Locates the Spring Security remember me cookie in the request and returns its value.
extractUriTemplateVariables(HttpServletRequest) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
  Deprecated.
extractUriTemplateVariables(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Deprecated.
extractUriTemplateVariables(HttpServletRequest) - Method in interface org.springframework.security.web.util.matcher.RequestVariablesExtractor
  Deprecated.
  Extract URL template variables from the request.

## F

FastHttpDateFormat - Class in org.springframework.security.web.savedrequest
  Utility class to generate HTTP dates.
FEATURE_POLICY - Static variable in class org.springframework.security.web.server.header.FeaturePolicyServerHttpHeadersWriter
FeaturePolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for Feature Policy.
FeaturePolicyHeaderWriter(String) - Constructor for class org.springframework.security.web.header.writers.FeaturePolicyHeaderWriter
  Create a new instance of `FeaturePolicyHeaderWriter` with supplied security policy directive(s).
FeaturePolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the `Feature-Policy` response header with configured policy directives.
FeaturePolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.FeaturePolicyServerHttpHeadersWriter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authentication.AnonymousAuthenticationWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authentication.logout.LogoutWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authentication.ott.GenerateOneTimeTokenWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authorization.AuthorizationWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.context.ReactorContextWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.context.SecurityContextServerWebExchangeWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.csrf.CsrfWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.ExchangeMatcherRedirectWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.header.HttpHeaderWriterWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.savedrequest.ServerRequestCacheWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.transport.HttpsRedirectWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.ui.DefaultResourcesWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.ui.LogoutPageGeneratingWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.ui.OneTimeTokenSubmitPageGeneratingWebFilter
filter(ServerWebExchange, WebFilterChain) - Method in class org.springframework.security.web.server.WebFilterChainProxy
FilterChainProxy - Class in org.springframework.security.web
  Delegates `Filter` requests to a list of Spring-managed filter beans.
FilterChainProxy() - Constructor for class org.springframework.security.web.FilterChainProxy
FilterChainProxy(List<SecurityFilterChain>) - Constructor for class org.springframework.security.web.FilterChainProxy
FilterChainProxy(SecurityFilterChain) - Constructor for class org.springframework.security.web.FilterChainProxy
FilterChainProxy.FilterChainDecorator - Interface in org.springframework.security.web
  A strategy for decorating the provided filter chain with one that accounts for the `SecurityFilterChain` for a given request.
FilterChainProxy.FilterChainValidator - Interface in org.springframework.security.web
FilterChainProxy.VirtualFilterChainDecorator - Class in org.springframework.security.web
  A `FilterChainProxy.FilterChainDecorator` that uses the `FilterChainProxy.VirtualFilterChain`
FilterInvocation - Class in org.springframework.security.web
  Holds objects associated with a HTTP filter.
FilterInvocation(ServletRequest, ServletResponse, FilterChain) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocation(String, String) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocation(String, String, String) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocation(String, String, String, ServletContext) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocation(String, String, String, String, String) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocation(String, String, String, String, String, ServletContext) - Constructor for class org.springframework.security.web.FilterInvocation
FilterInvocationSecurityMetadataSource - Interface in org.springframework.security.web.access.intercept
  Marker interface for `SecurityMetadataSource` implementations that are designed to perform lookups keyed on `FilterInvocation`s.
FilterSecurityInterceptor - Class in org.springframework.security.web.access.intercept
  Deprecated.
  Use `AuthorizationFilter` instead
FilterSecurityInterceptor() - Constructor for class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
findByCredentialId(Bytes) - Method in class org.springframework.security.web.webauthn.management.MapUserCredentialRepository
findByCredentialId(Bytes) - Method in interface org.springframework.security.web.webauthn.management.UserCredentialRepository
  Finds an entry by credential id.
findById(Bytes) - Method in class org.springframework.security.web.webauthn.management.MapPublicKeyCredentialUserEntityRepository
findById(Bytes) - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository
  Finds the `PublicKeyCredentialUserEntity` by `PublicKeyCredentialUserEntity.getId()`
findByUserId(Bytes) - Method in class org.springframework.security.web.webauthn.management.MapUserCredentialRepository
findByUserId(Bytes) - Method in interface org.springframework.security.web.webauthn.management.UserCredentialRepository
  Finds all `CredentialRecord` instances for a specific user.
findByUsername(String) - Method in class org.springframework.security.web.webauthn.management.MapPublicKeyCredentialUserEntityRepository
findByUsername(String) - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository
  Finds the `PublicKeyCredentialUserEntity` by the username.
findRequiredWebApplicationContext(ServletContext) - Static method in class org.springframework.security.web.context.support.SecurityWebApplicationContextUtils
  Find a unique `WebApplicationContext` for this web app: either the root web app context (preferred) or a unique `WebApplicationContext` among the registered `ServletContext` attributes (typically coming from a single `DispatcherServlet` in the current web application).
FirewalledRequest - Class in org.springframework.security.web.firewall
  Request wrapper which is returned by the `HttpFirewall` interface.
FirewalledRequest(HttpServletRequest) - Constructor for class org.springframework.security.web.firewall.FirewalledRequest
  Constructs a request object wrapping the given request.
flushBuffer() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the superclass `flushBuffer()`
ForceEagerSessionCreationFilter - Class in org.springframework.security.web.session
  Eagerly creates `HttpSession` if it does not already exist.
ForceEagerSessionCreationFilter() - Constructor for class org.springframework.security.web.session.ForceEagerSessionCreationFilter
format - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  HTTP date format.
formatCache - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Formatter cache.
formatDate(long, DateFormat) - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Formats a specified date to HTTP format.
formats - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  The set of SimpleDateFormat formats to use in `getDateHeader()`.
ForwardAuthenticationFailureHandler - Class in org.springframework.security.web.authentication
  Forward Authentication Failure Handler
ForwardAuthenticationFailureHandler(String) - Constructor for class org.springframework.security.web.authentication.ForwardAuthenticationFailureHandler
ForwardAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication
  Forward Authentication Success Handler
ForwardAuthenticationSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.ForwardAuthenticationSuccessHandler
ForwardLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout
  `LogoutSuccessHandler` implementation that will perform a request dispatcher "forward" to the specified target URL.
ForwardLogoutSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.logout.ForwardLogoutSuccessHandler
  Construct a new `ForwardLogoutSuccessHandler` with the given target URL.
from(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
from(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
from(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
from(String) - Static method in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
fromBase64(String) - Static method in class org.springframework.security.web.webauthn.api.Bytes
  Creates a new instance from a base64 url string.
fromBase64(String) - Static method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCose
  Creates a new instance form a Base64 URL encoded String
fromCredentialRecord(CredentialRecord) - Static method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
fullyAuthenticated() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are allowed by users who have authenticated and were not "remembered".

## G

generateNewContext() - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  By default, calls `SecurityContextHolder.createEmptyContext()` to obtain a new context (there should be no context present in the holder when this method is called).
GenerateOneTimeTokenFilter - Class in org.springframework.security.web.authentication.ott
  Filter that process a One-Time Token generation request.
GenerateOneTimeTokenFilter(OneTimeTokenService, OneTimeTokenGenerationSuccessHandler) - Constructor for class org.springframework.security.web.authentication.ott.GenerateOneTimeTokenFilter
GenerateOneTimeTokenWebFilter - Class in org.springframework.security.web.server.authentication.ott
  `WebFilter` implementation that process a One-Time Token generation request.
GenerateOneTimeTokenWebFilter(ReactiveOneTimeTokenService, ServerOneTimeTokenGenerationSuccessHandler) - Constructor for class org.springframework.security.web.server.authentication.ott.GenerateOneTimeTokenWebFilter
generateSeriesData() - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
generateToken(HttpServletRequest) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository
  Generates a `CsrfToken`
generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository
  Deprecated.
  Generates a new token
generateToken(ServerWebExchange) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
generateToken(ServerWebExchange) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRepository
  Generates a `CsrfToken`
generateToken(ServerWebExchange) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
generateTokenData() - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
get() - Method in interface org.springframework.security.web.csrf.DeferredCsrfToken
  Gets the `CsrfToken`
get(String) - Static method in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
getAccessDeniedHandler() - Method in class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry
getAlg() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
  The alg member specifies the cryptographic signature algorithm with which the newly generated credential will be used, and thus also the type of asymmetric key pair to be generated, e.g., RSA or Elliptic Curve.
getAllConfigAttributes() - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
getAllowCredentials() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The allowCredentials property is an OPTIONAL member is used by the client to find authenticators eligible for this authentication ceremony.
getAllowFromValue(HttpServletRequest) - Method in class org.springframework.security.web.header.writers.frameoptions.AbstractRequestParameterAllowFromStrategy
  Deprecated.
getAllowFromValue(HttpServletRequest) - Method in interface org.springframework.security.web.header.writers.frameoptions.AllowFromStrategy
  Deprecated.
  Gets the value for ALLOW-FROM excluding the ALLOW-FROM.
getAllowFromValue(HttpServletRequest) - Method in class org.springframework.security.web.header.writers.frameoptions.StaticAllowFromStrategy
  Deprecated.
getAllowSessionCreation() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
getAlreadyFilteredAttributeName() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getAttestation() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The attestation property is an OPTIONAL member used by the Relying Party to specify a preference regarding attestation conveyance.
getAttestationClientDataJSON() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The attestationClientDataJSON is the value of the attestationObject attribute when the public key credential source was registered.
getAttestationClientDataJSON() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getAttestationObject() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse
  The attestationObject is an OPTIONAL attribute contains an attestation object, if the authenticator supports attestation in assertions.
getAttestationObject() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse
  The attestationObject attribute contains an attestation object, which is opaque to, and cryptographically protected against tampering by, the client.
getAttestationObject() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The attestationObject is the value of the attestationObject attribute when the public key credential source was registered.
getAttestationObject() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getAttributes(Object) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
getAuthentication() - Method in class org.springframework.security.web.server.authentication.MaximumSessionsContext
getAuthentication() - Method in class org.springframework.security.web.webauthn.management.ImmutablePublicKeyCredentialCreationOptionsRequest
getAuthentication() - Method in class org.springframework.security.web.webauthn.management.ImmutablePublicKeyCredentialRequestOptionsRequest
getAuthentication() - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialCreationOptionsRequest
  The current `Authentication`.
getAuthentication() - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialRequestOptionsRequest
  The current `Authentication`.
getAuthenticationConverter() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getAuthenticationDetailsSource() - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
getAuthenticationDetailsSource() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getAuthenticationDetailsSource() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
getAuthenticationEntryPoint() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
getAuthenticationEntryPoint() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
getAuthenticationEntryPoint() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
getAuthenticationManager() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
getAuthenticationManager() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
getAuthenticationManagerResolver() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getAuthenticationTrustResolver() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
getAuthenticatorAttachment() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria
  If authenticatorAttachment is present, eligible authenticators are filtered to be only those authenticators attached with the specified authenticator attachment modality (see also 6.2.1 Authenticator Attachment Modality).
getAuthenticatorAttachment() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The authenticatorAttachment reports the authenticator attachment modality in effect at the time the navigator.credentials.create() or navigator.credentials.get() methods successfully complete.
getAuthenticatorData() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse
  The authenticatorData contains the authenticator data returned by the authenticator.
getAuthenticatorSelection() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The authenticatorSelection property is an OPTIONAL member used by the Relying Party to list any existing credentials mapped to this user account (as identified by user.id).
getAuthorities() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
getAuthority() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
getAuthorizationManager() - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  Gets the `AuthorizationManager` used by this filter
getBytes() - Method in class org.springframework.security.web.webauthn.api.Bytes
  Gets the raw bytes.
getBytes() - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCose
getBytes() - Method in interface org.springframework.security.web.webauthn.api.PublicKeyCose
  The byes of a COSE encoded public key.
getChain() - Method in class org.springframework.security.web.FilterInvocation
getChain() - Method in class org.springframework.security.web.server.WebFilterExchange
  The filter chain
getChallenge() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The challenge specifies the challenge that the authenticator signs, along with other data, when producing an attestation object for the newly created credential.
getChallenge() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The challenge property specifies a challenge that the authenticator signs, along with other data, when producing an authentication assertion.
getChannelDecisionManager() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
getChannelProcessors() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
getClientDataJSON() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorResponse
  The clientDataJSON contains a JSON-compatible serialization of the client data, the hash of which is passed to the authenticator by the client in its call to either create() or get() (i.e., the client data itself is not sent to the authenticator).
getClientExtensionResults() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The clientExtensionsResults is a mapping of extension identifier to client extension output.
getComment() - Method in class org.springframework.security.web.savedrequest.SavedCookie
  Deprecated, for removal: This API element is subject to removal in a future version.
getContextPath() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getCookie() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getCookieName() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getCookiePath() - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Get the path that the CSRF cookie will be set to.
getCookies() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getCookies() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getCookies() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getCreated() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  When this `CredentialRecord` was created.
getCreated() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getCreationOptions() - Method in class org.springframework.security.web.webauthn.management.ImmutableRelyingPartyRegistrationRequest
getCreationOptions() - Method in interface org.springframework.security.web.webauthn.management.RelyingPartyRegistrationRequest
getCredential() - Method in class org.springframework.security.web.webauthn.management.RelyingPartyPublicKey
getCredentialId() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The credential.id.
getCredentialId() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getCredentials() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken
  Get the credentials
getCredentials() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthentication
getCredentials() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationRequestToken
getCredentialsCharset() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
getCredentialsCharset(HttpServletRequest) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
getCredentialsCharset(HttpServletRequest) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
getCredentialType() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The credential.type
getCredentialType() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getCredProtectionPolicy() - Method in class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect
getCurrentDate() - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Gets the current date in HTTP format.
getCurrentSession() - Method in class org.springframework.security.web.server.authentication.MaximumSessionsContext
getDate() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken
getDecodedUrlBlacklist() - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Provides the existing decoded url blocklist which can add/remove entries from
getDecodedUrlBlocklist() - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Provides the existing decoded url blocklist which can add/remove entries from
getDecodedUrlBlocklist() - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
getDefaultTargetUrl() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Supplies the default target Url that will be used if no saved request is found or the `alwaysUseDefaultTargetUrl` property is set to true.
getDigestAlgorithm() - Method in enum class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.RememberMeTokenAlgorithm
getDispatcherWebApplicationContextSuffix() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Return the <servlet-name> to use the DispatcherServlet's `WebApplicationContext` to find the `DelegatingFilterProxy` or null to use the parent `ApplicationContext`.
getDisplayName() - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity
getDisplayName() - Method in interface org.springframework.security.web.webauthn.api.PublicKeyCredentialUserEntity
  The displayName is a human-palatable name for the user account, intended only for display.
getDomain() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getEncodedUrlBlacklist() - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Deprecated.
  Use `StrictHttpFirewall.getEncodedUrlBlocklist()` instead
getEncodedUrlBlocklist() - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Provides the existing encoded url blocklist which can add/remove entries from
getEncodedUrlBlocklist() - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
getEntry() - Method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcherEntry
getEntry() - Method in class org.springframework.security.web.util.matcher.RequestMatcherEntry
getEntryPoint() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
getEntryPoint() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
getEntryPoint() - Method in class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint.DelegateEntry
getExchange() - Method in class org.springframework.security.web.server.authorization.AuthorizationContext
getExchange() - Method in class org.springframework.security.web.server.WebFilterExchange
  Get the exchange
getExcludeCredentials() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The excludeCredentials property is the OPTIONAL member used by the Relying Party to list any existing credentials mapped to this user account (as identified by user.id).
getExtensionId() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientInput
  Gets the extension identifier.
getExtensionId() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientOutput
  Gets the extension identifier.
getExtensionId() - Method in class org.springframework.security.web.webauthn.api.CredentialPropertiesOutput
getExtensionId() - Method in class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput
getExtensionId() - Method in class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInput
getExtensions() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The extensions property is an OPTIONAL member used by the Relying Party to provide client extension inputs requesting additional processing by the client and authenticator.
getExtensions() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The extensions is an OPTIONAL property used by the Relying Party to provide client extension inputs requesting additional processing by the client and authenticator.
getExtraHiddenFields(HttpServletRequest) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
getExtraHiddenFields(ServerWebExchange) - Method in class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
getFailureHandler() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
getFailureHandler() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getFilterChain() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent
getFilterChainProxy() - Method in class org.springframework.security.web.debug.DebugFilter
getFilterChains() - Method in class org.springframework.security.web.FilterChainProxy
getFilters() - Method in class org.springframework.security.web.DefaultSecurityFilterChain
getFilters() - Method in interface org.springframework.security.web.SecurityFilterChain
getFilters(String) - Method in class org.springframework.security.web.FilterChainProxy
  Convenience method, mainly for testing.
getFirewalledExchange(ServerWebExchange) - Method in interface org.springframework.security.web.server.firewall.ServerWebExchangeFirewall
  Get a `ServerWebExchange` that has firewall rules applied to it.
getFirewalledExchange(ServerWebExchange) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
getFirewalledRequest(HttpServletRequest) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall
getFirewalledRequest(HttpServletRequest) - Method in interface org.springframework.security.web.firewall.HttpFirewall
  Provides the request object which will be passed through the filter chain.
getFirewalledRequest(HttpServletRequest) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
getFirewalledResponse(HttpServletResponse) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall
getFirewalledResponse(HttpServletResponse) - Method in interface org.springframework.security.web.firewall.HttpFirewall
  Provides the response which will be passed through the filter chain.
getFirewalledResponse(HttpServletResponse) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
getFirstThrowableOfType(Class<? extends Throwable>, Throwable[]) - Method in class org.springframework.security.web.util.ThrowableAnalyzer
  Returns the first throwable from the passed in array that is assignable to the provided type.
getFullRequestUrl() - Method in class org.springframework.security.web.FilterInvocation
  Indicates the URL that the user agent used for this request.
getGrantedAuthorities() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails
getHeaderName() - Method in interface org.springframework.security.web.csrf.CsrfToken
  Gets the HTTP header that the CSRF is populated on the response and can be placed on requests instead of the parameter.
getHeaderName() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken
getHeaderName() - Method in interface org.springframework.security.web.server.csrf.CsrfToken
  Gets the HTTP header that the CSRF is populated on the response and can be placed on requests instead of the parameter.
getHeaderName() - Method in class org.springframework.security.web.server.csrf.DefaultCsrfToken
getHeaderNames() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getHeaderNames() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getHeaderNames() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getHeaderValue() - Method in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
getHeaderValue() - Method in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
getHeaderValues(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getHeaderValues(String) - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getHeaderValues(String) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getHttpRequest() - Method in class org.springframework.security.web.FilterInvocation
getHttpResponse() - Method in class org.springframework.security.web.FilterInvocation
getId() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent
getId() - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity
getId() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The id attribute is inherited from Credential, though PublicKeyCredential overrides Credential's getter, instead returning the base64url encoding of the data contained in the object's [[identifier]] internal slot.
getId() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor
  The id property contains the credential ID of the public key credential the caller is referring to.
getId() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity
  The id property is a unique identifier for the Relying Party entity, which sets the RP ID.
getId() - Method in interface org.springframework.security.web.webauthn.api.PublicKeyCredentialUserEntity
  The id is the user handle of the user account.
getInput() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientInput
  Gets the client extension.
getInput() - Method in class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput
getInput() - Method in class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInput
getInputs() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientInputs
  Gets all of the `AuthenticationExtensionsClientInput`.
getInputs() - Method in class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInputs
getInsecureKeyword() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
getInstance() - Static method in class org.springframework.security.web.server.context.NoOpServerSecurityContextRepository
getInstance() - Static method in class org.springframework.security.web.server.savedrequest.NoOpServerRequestCache
getKey() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getKey() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
getLabel() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  A human-readable label for this `CredentialRecord` assigned by the user.
getLabel() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getLabel() - Method in class org.springframework.security.web.webauthn.management.RelyingPartyPublicKey
getLastUsed() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The last time this `CredentialRecord` was used.
getLastUsed() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getLocales() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getLocales() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getLocales() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getLoginFormUrl() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
getLoginPageUrl() - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
getMappableAttributes() - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint
getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint
getMatcher() - Method in class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry
getMatcher() - Method in class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint.DelegateEntry
getMatcher() - Method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcherEntry
getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache
getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache
  Returns a wrapper around the saved request, if it matches the current request.
getMaxAge() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getMaximumSessionsAllowed() - Method in class org.springframework.security.web.server.authentication.MaximumSessionsContext
getMaximumSessionsForThisUser(Authentication) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  Method intended for use by subclasses to override the maximum number of sessions that are permitted for a particular authentication.
getMethod() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getMethod() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getMethod() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getName() - Method in class org.springframework.security.web.header.Header
  Gets the name of the header.
getName() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getName() - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity
getName() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity
  The name property is a human-palatable name for the entity.
getName() - Method in interface org.springframework.security.web.webauthn.api.PublicKeyCredentialUserEntity
  The name property is a human-palatable identifier for a user account.
getName() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthentication
getNewSessionId() - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent
  Getter for the session ID after it was changed.
getNewSessionId() - Method in class org.springframework.security.web.session.HttpSessionIdChangedEvent
getNonceValiditySeconds() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
getOldSessionId() - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent
  Getter for the session ID before it was changed.
getOldSessionId() - Method in class org.springframework.security.web.session.HttpSessionIdChangedEvent
getOrder() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
getOrder() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
getOutput() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientOutput
  The client extension output.
getOutput() - Method in class org.springframework.security.web.webauthn.api.CredentialPropertiesOutput
getOutputs() - Method in interface org.springframework.security.web.webauthn.api.AuthenticationExtensionsClientOutputs
  Gets all of the `AuthenticationExtensionsClientOutput`.
getOutputs() - Method in class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientOutputs
getOutputStream() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the calling `getOutputStream().close()` or `getOutputStream().flush()`
getParameter() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getParameterMap() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getParameterMap() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getParameterMap() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getParameterName() - Method in interface org.springframework.security.web.csrf.CsrfToken
  Gets the HTTP parameter name that should contain the token.
getParameterName() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken
getParameterName() - Method in interface org.springframework.security.web.server.csrf.CsrfToken
  Gets the HTTP parameter name that should contain the token.
getParameterName() - Method in class org.springframework.security.web.server.csrf.DefaultCsrfToken
getParameterNames() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getParameterValues(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getParameterValues(String) - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getParameterValues(String) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getPasswordParameter() - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
getPath() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getPathInfo() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getPattern() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
getPolicy() - Method in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
getPolicy() - Method in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
getPolicy() - Method in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
getPolicy() - Method in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
getPolicy() - Method in enum class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
getPolicy() - Method in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
getPolicy() - Method in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
getPolicy() - Method in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
getPortMapper() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
getPortMapper() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
getPortMapper() - Method in class org.springframework.security.web.PortResolverImpl
getPortResolver() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
getPortResolver() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Override to extract the credentials (if applicable) from the current request.
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter
  For J2EE container-based authentication there is no generic way to retrieve the credentials, as such this method returns a fixed dummy value.
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
  Credentials aren't usually applicable, but if a `credentialsEnvironmentVariable` is set, this will be read and used as the credentials value.
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
  Credentials aren't usually applicable, but if a `credentialsRequestHeader` is set, this will be read and used as the credentials value.
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter
  For J2EE container-based authentication there is no generic way to retrieve the credentials, as such this method returns a fixed dummy value.
getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Override to extract the principal information from the current request
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter
  Return the J2EE user name.
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
  Read and returns the variable named by `principalEnvironmentVariable` from the request.
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
  Read and returns the header named by `principalRequestHeader` from the request.
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter
  Return the WebSphere user name.
getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter
getPrincipal() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
getPrincipal() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken
  Get the principal
getPrincipal() - Method in class org.springframework.security.web.server.context.SecurityContextServerWebExchange
getPrincipal() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthentication
getPrincipal() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationRequestToken
getPubKeyCredParams() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The publicKeyCredParams params lisst the key types and signature algorithms the Relying Party Supports, ordered from most preferred to least preferred.
getPublicKey() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The publicKey
getPublicKey() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getPublicKey() - Method in class org.springframework.security.web.webauthn.management.ImmutableRelyingPartyRegistrationRequest
getPublicKey() - Method in class org.springframework.security.web.webauthn.management.RelyingPartyAuthenticationRequest
  Gets the public key.
getPublicKey() - Method in interface org.springframework.security.web.webauthn.management.RelyingPartyRegistrationRequest
getQueryString() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getRawId() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The rawId returns the raw identifier.
getRealmName() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint
getRealmName() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
getRedirectStrategy() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
getRedirectStrategy() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
getRedirectStrategy() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
getRedirectUri(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
getRedirectUri(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.NoOpServerRequestCache
getRedirectUri(ServerWebExchange) - Method in interface org.springframework.security.web.server.savedrequest.ServerRequestCache
  Get the URI that can be redirected to trigger the saved request to be used
getRedirectUri(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
getRedirectUrl() - Method in class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler.AuthenticationSuccess
getRedirectUrl() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
  Indicates the URL that the user agent used for this request.
getRedirectUrl() - Method in interface org.springframework.security.web.savedrequest.SavedRequest
getRedirectUrl() - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
getRememberMeServices() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
getRememberMeServices() - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
getRemoteAddress() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails
  Indicates the TCP/IP address the authentication request was received from.
getRemoteUser() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Returns the principal's name, as obtained from the `SecurityContextHolder`.
getRequest() - Method in class org.springframework.security.web.access.intercept.RequestAuthorizationContext
  Returns the `HttpServletRequest`.
getRequest() - Method in class org.springframework.security.web.context.HttpRequestResponseHolder
  Deprecated.
getRequest() - Method in class org.springframework.security.web.FilterInvocation
getRequest() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent
getRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
getRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
getRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache
getRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache
  Returns the saved request, leaving it cached.
getRequestMatcher() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getRequestMatcher() - Method in class org.springframework.security.web.DefaultSecurityFilterChain
getRequestMatcher() - Method in class org.springframework.security.web.util.matcher.RequestMatcherEntry
getRequestOptions() - Method in class org.springframework.security.web.webauthn.management.RelyingPartyAuthenticationRequest
  Ges the request options.
getRequestURI() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getRequestUrl() - Method in class org.springframework.security.web.FilterInvocation
  Obtains the web application-specific fragment of the URL.
getRequestURL() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getResidentKey() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria
  The residentKey specifies the extent to which the Relying Party desires to create a client-side discoverable credential.
getResponse() - Method in class org.springframework.security.web.context.HttpRequestResponseHolder
  Deprecated.
getResponse() - Method in class org.springframework.security.web.FilterInvocation
getResponse() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent
getResponse() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The response to the client's request to either create a public key credential, or generate an authentication assertion.
getRp() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The rp property contains data about the Relying Party responsible for the request.
getRpId() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The rpId is an OPTIONAL member specifies the RP ID claimed by the Relying Party.
getScheme() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getSecureKeyword() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
getSecureObjectClass() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
getSecurityContexts() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent
getSecurityDispatcherTypes() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Get the `DispatcherType` for the springSecurityFilterChain.
getSecurityMetadataSource() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
getSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
getSeries() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken
getServerName() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getServerPort() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getServerPort(ServletRequest) - Method in interface org.springframework.security.web.PortResolver
  Indicates the port the `ServletRequest` was received on.
getServerPort(ServletRequest) - Method in class org.springframework.security.web.PortResolverImpl
getServletPath() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
getServletPath() - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
getSession() - Method in class org.springframework.security.web.session.HttpSessionCreatedEvent
getSession() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent
getSessionId() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails
  Indicates the `HttpSession` id the authentication request was received from.
getSessionInformation() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent
getSessions() - Method in class org.springframework.security.web.server.authentication.MaximumSessionsContext
getSessionTrackingModes() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Determines how a session should be tracked.
getSignature() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse
  The signature contains the raw signature returned from the authenticator.
getSignatureCount() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The authData.signCount
getSignatureCount() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getSource() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
  Returns the original user associated with a successful user switch.
getSuccessHandler() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
getSuccessHandler() - Method in class org.springframework.security.web.authentication.AuthenticationFilter
getTargetUrlParameter() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
getTargetUser() - Method in class org.springframework.security.web.authentication.switchuser.AuthenticationSwitchUserEvent
getTimeout() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The timeout property specifies a time, in milliseconds, that the Relying Party is willing to wait for the call to complete.
getTimeout() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The timeout property is an OPTIONAL member specifies a time, in milliseconds, that the Relying Party is willing to wait for the call to complete.
getToken() - Method in interface org.springframework.security.web.csrf.CsrfToken
  Gets the token value.
getToken() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken
getToken() - Method in interface org.springframework.security.web.server.csrf.CsrfToken
  Gets the token value.
getToken() - Method in class org.springframework.security.web.server.csrf.DefaultCsrfToken
getTokenForSeries(String) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl
getTokenForSeries(String) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  Loads the token data for the supplied series identifier.
getTokenForSeries(String) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository
getTokenValiditySeconds() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getTokenValue() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken
getTranslatedPortMappings() - Method in class org.springframework.security.web.PortMapperImpl
  Returns the translated (Integer -> Integer) version of the original port mapping specified via setHttpsPortMapping()
getTransports() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse
  The transports returns the transports
getTransports() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The transpots is the value returned from `response.getTransports()`.
getTransports() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getTransports() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor
  The transports property is an OPTIONAL member that contains a hint as to how the client might communicate with the managing authenticator of the public key credential the caller is referring to.
getType() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential
  The type attribute returns the value of the object's interface object's [[type]] slot, which specifies the credential type represented by this object.
getType() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor
  The type property contains the type of the public key credential the caller is referring to.
getType() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
  The type property member specifies the type of credential to be created.
getUrl() - Method in class org.springframework.security.web.util.RedirectUrlBuilder
getUser() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions
  The user contains names and an identifier for the user account performing the registration.
getUserCache() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
getUserDetailsService() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
getUserDetailsService() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
getUserEntityUserId() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  A reference to the associated `PublicKeyCredentialUserEntity.getId()`
getUserEntityUserId() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
getUserHandle() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse
  The userHandle is the user handle which is returned from the authenticator, or null if the authenticator did not return a user handle.
getUsername() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken
getUsername(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Returns the name of the target user.
getUsernameParameter() - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
getUserPrincipal() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Returns the `Authentication` (which is a subclass of `Principal`), or `null` if unavailable.
getUserRoles(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
  Obtains the list of user roles based on the current user's JEE roles.
getUserVerification() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria
  The userVerification specifies the Relying Party's requirements regarding user verification for the create() operation.
getUserVerification() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions
  The userVerification property is an OPTIONAL member specifies the Relying Party's requirements regarding user verification for the get() operation.
getValue() - Method in class org.springframework.security.web.savedrequest.SavedCookie
getValue() - Method in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  Gets the String value of the preference.
getValue() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
  Gets the value.
getValue() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  Get's the value.
getValue() - Method in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
getValue() - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialType
  Gets the value.
getValue() - Method in class org.springframework.security.web.webauthn.api.ResidentKeyRequirement
  Gets the value.
getValue() - Method in class org.springframework.security.web.webauthn.api.UserVerificationRequirement
  Gets the value
getValues() - Method in class org.springframework.security.web.header.Header
  Gets the values of the header.
getVariables() - Method in class org.springframework.security.web.access.intercept.RequestAuthorizationContext
  Returns the extracted variable values where the key is the variable name and the value is the variable value.
getVariables() - Method in class org.springframework.security.web.server.authorization.AuthorizationContext
getVariables() - Method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult
  Gets potential variables and their values
getVariables() - Method in class org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
  Returns the extracted variable values where the key is the variable name and the value is the variable value
getVersion() - Method in class org.springframework.security.web.savedrequest.SavedCookie
  Deprecated, for removal: This API element is subject to removal in a future version.
getWebAuthnRequest() - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationRequestToken
  Gets the `RelyingPartyAuthenticationRequest`
getWebFilters() - Method in class org.springframework.security.web.server.MatcherSecurityWebFilterChain
getWebFilters() - Method in interface org.springframework.security.web.server.SecurityWebFilterChain
  The `WebFilter` to use
getWriter() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the `getWriter().close()` or `getWriter().flush()`
gmtZone - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  GMT time zone - all HTTP dates are on GMT

## H

handle(HttpServletRequest, HttpServletResponse, Supplier<CsrfToken>) - Method in class org.springframework.security.web.csrf.CsrfTokenRequestAttributeHandler
handle(HttpServletRequest, HttpServletResponse, Supplier<CsrfToken>) - Method in interface org.springframework.security.web.csrf.CsrfTokenRequestHandler
  Handles a request using a `CsrfToken`.
handle(HttpServletRequest, HttpServletResponse, Supplier<CsrfToken>) - Method in class org.springframework.security.web.csrf.XorCsrfTokenRequestAttributeHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in interface org.springframework.security.web.access.AccessDeniedHandler
  Handles an access denied failure.
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.AccessDeniedHandlerImpl
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.CompositeAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.DelegatingAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.NoOpAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.ObservationMarkingAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.RequestMatcherDelegatingAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.session.InvalidSessionAccessDeniedHandler
handle(HttpServletRequest, HttpServletResponse, OneTimeToken) - Method in interface org.springframework.security.web.authentication.ott.OneTimeTokenGenerationSuccessHandler
  Handles generated one-time tokens
handle(HttpServletRequest, HttpServletResponse, OneTimeToken) - Method in class org.springframework.security.web.authentication.ott.RedirectOneTimeTokenGenerationSuccessHandler
handle(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Invokes the configured `RedirectStrategy` with the URL returned by the `determineTargetUrl` method.
handle(HttpServletRequest, HttpServletResponse, RequestRejectedException) - Method in class org.springframework.security.web.firewall.CompositeRequestRejectedHandler
handle(HttpServletRequest, HttpServletResponse, RequestRejectedException) - Method in class org.springframework.security.web.firewall.DefaultRequestRejectedHandler
handle(HttpServletRequest, HttpServletResponse, RequestRejectedException) - Method in class org.springframework.security.web.firewall.HttpStatusRequestRejectedHandler
handle(HttpServletRequest, HttpServletResponse, RequestRejectedException) - Method in class org.springframework.security.web.firewall.ObservationMarkingRequestRejectedHandler
handle(HttpServletRequest, HttpServletResponse, RequestRejectedException) - Method in interface org.springframework.security.web.firewall.RequestRejectedHandler
  Handles an request rejected failure.
handle(MaximumSessionsContext) - Method in class org.springframework.security.web.server.authentication.InvalidateLeastUsedServerMaximumSessionsExceededHandler
handle(MaximumSessionsContext) - Method in class org.springframework.security.web.server.authentication.PreventLoginServerMaximumSessionsExceededHandler
handle(MaximumSessionsContext) - Method in interface org.springframework.security.web.server.authentication.ServerMaximumSessionsExceededHandler
  Handles the scenario when the maximum number of sessions for a user has been reached.
handle(ServerWebExchange, AccessDeniedException) - Method in class org.springframework.security.web.server.authorization.HttpStatusServerAccessDeniedHandler
handle(ServerWebExchange, AccessDeniedException) - Method in interface org.springframework.security.web.server.authorization.ServerAccessDeniedHandler
handle(ServerWebExchange, AccessDeniedException) - Method in class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler
handle(ServerWebExchange, OneTimeToken) - Method in interface org.springframework.security.web.server.authentication.ott.ServerOneTimeTokenGenerationSuccessHandler
  Handles generated one-time tokens
handle(ServerWebExchange, OneTimeToken) - Method in class org.springframework.security.web.server.authentication.ott.ServerRedirectOneTimeTokenGenerationSuccessHandler
handle(ServerWebExchange, ServerExchangeRejectedException) - Method in class org.springframework.security.web.server.firewall.HttpStatusExchangeRejectedHandler
handle(ServerWebExchange, ServerExchangeRejectedException) - Method in interface org.springframework.security.web.server.firewall.ServerExchangeRejectedHandler
  Handles an request rejected failure.
handle(ServerWebExchange, Mono<CsrfToken>) - Method in class org.springframework.security.web.server.csrf.ServerCsrfTokenRequestAttributeHandler
handle(ServerWebExchange, Mono<CsrfToken>) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRequestHandler
  Handles a request using a `CsrfToken`.
handle(ServerWebExchange, Mono<CsrfToken>) - Method in class org.springframework.security.web.server.csrf.XorServerCsrfTokenRequestAttributeHandler
HandlerMappingIntrospectorRequestTransformer - Class in org.springframework.security.web.access
  Transforms by passing it into `HandlerMappingIntrospector.setCache(HttpServletRequest)`.
HandlerMappingIntrospectorRequestTransformer(HandlerMappingIntrospector) - Constructor for class org.springframework.security.web.access.HandlerMappingIntrospectorRequestTransformer
hasAnyAuthority(String...) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specifies that a user requires one of many authorities.
hasAnyRole(String...) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specifies that a user requires one of many roles.
hasAuthority(String) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specifies a user requires an authority.
hashCode() - Method in class org.springframework.security.web.access.intercept.RequestKey
hashCode() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
hashCode() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails
hashCode() - Method in class org.springframework.security.web.header.Header
hashCode() - Method in class org.springframework.security.web.server.csrf.DefaultCsrfToken
hashCode() - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
hashCode() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
hashCode() - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher
hashCode() - Method in class org.springframework.security.web.webauthn.api.Bytes
hasIpAddress(String) - Method in class org.springframework.security.web.access.expression.WebSecurityExpressionRoot
  Takes a specific IP address or a range using the IP/Netmask (e.g.
hasIpAddress(String) - Static method in class org.springframework.security.web.access.IpAddressAuthorizationManager
  Creates an instance of `IpAddressAuthorizationManager` with the provided IP address.
hasIpAddress(String) - Static method in class org.springframework.security.web.server.authorization.IpAddressReactiveAuthorizationManager
  Creates an instance of `IpAddressReactiveAuthorizationManager` with the provided IP address.
hasMoreElements() - Method in class org.springframework.security.web.savedrequest.Enumerator
  Tests if this enumeration contains more elements.
hasRole(String) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specifies a user requires a role.
HaveIBeenPwnedRestApiPasswordChecker - Class in org.springframework.security.web.authentication.password
  Checks if the provided password was leaked by relying on Have I Been Pwned REST API.
HaveIBeenPwnedRestApiPasswordChecker() - Constructor for class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiPasswordChecker
HaveIBeenPwnedRestApiReactivePasswordChecker - Class in org.springframework.security.web.authentication.password
  Checks if the provided password was leaked by relying on Have I Been Pwned REST API.
HaveIBeenPwnedRestApiReactivePasswordChecker() - Constructor for class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiReactivePasswordChecker
header(String, String...) - Method in class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter.Builder
Header - Class in org.springframework.security.web.header
  Represents a Header to be added to the `HttpServletResponse`
Header(String, String...) - Constructor for class org.springframework.security.web.header.Header
  Creates a new instance
HeaderWriter - Interface in org.springframework.security.web.header
  Contract for writing headers to a `HttpServletResponse`
HeaderWriterFilter - Class in org.springframework.security.web.header
  Filter implementation to add headers to the current response.
HeaderWriterFilter(List<HeaderWriter>) - Constructor for class org.springframework.security.web.header.HeaderWriterFilter
  Creates a new instance.
HeaderWriterLogoutHandler - Class in org.springframework.security.web.authentication.logout
HeaderWriterLogoutHandler(HeaderWriter) - Constructor for class org.springframework.security.web.authentication.logout.HeaderWriterLogoutHandler
  Constructs a new instance using the passed `HeaderWriter` implementation
HeaderWriterServerLogoutHandler - Class in org.springframework.security.web.server.authentication.logout
  A `ServerLogoutHandler` implementation which writes HTTP headers during logout.
HeaderWriterServerLogoutHandler(ServerHttpHeadersWriter) - Constructor for class org.springframework.security.web.server.authentication.logout.HeaderWriterServerLogoutHandler
  Constructs a new instance using the `ServerHttpHeadersWriter` implementation.
HpkpHeaderWriter - Class in org.springframework.security.web.header.writers
  Deprecated.
  see Certificate and Public Key Pinning for more context
HpkpHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Creates a new instance
HpkpHeaderWriter(long) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Creates a new instance
HpkpHeaderWriter(long, boolean) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Creates a new instance
HpkpHeaderWriter(long, boolean, boolean) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Creates a new instance
HstsHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for HTTP Strict Transport Security (HSTS).
HstsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(long) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(long, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(long, boolean, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(RequestMatcher, long, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
HstsHeaderWriter(RequestMatcher, long, boolean, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter
  Creates a new instance
Http403ForbiddenEntryPoint - Class in org.springframework.security.web.authentication
  In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.
Http403ForbiddenEntryPoint() - Constructor for class org.springframework.security.web.authentication.Http403ForbiddenEntryPoint
HttpBasicServerAuthenticationEntryPoint - Class in org.springframework.security.web.server.authentication
  Prompts a user for HTTP Basic authentication.
HttpBasicServerAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.server.authentication.HttpBasicServerAuthenticationEntryPoint
HttpFirewall - Interface in org.springframework.security.web.firewall
  Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.
HttpHeaderWriterWebFilter - Class in org.springframework.security.web.server.header
  Invokes a `ServerHttpHeadersWriter` on `ReactiveHttpOutputMessage.beforeCommit(java.util.function.Supplier)`.
HttpHeaderWriterWebFilter(ServerHttpHeadersWriter) - Constructor for class org.springframework.security.web.server.header.HttpHeaderWriterWebFilter
HttpMessageConverterAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication
  An `AuthenticationSuccessHandler` that writes a JSON response with the redirect URL and an authenticated status similar to: `{ "redirectUrl": "/user/profile", "authenticated": true }`
HttpMessageConverterAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler
HttpMessageConverterAuthenticationSuccessHandler.AuthenticationSuccess - Class in org.springframework.security.web.authentication
  A response object used to write the JSON response for successful authentication.
HttpRequestResponseHolder - Class in org.springframework.security.web.context
  Deprecated.
  Use `SecurityContextRepository.loadDeferredContext(HttpServletRequest)`
HttpRequestResponseHolder(HttpServletRequest, HttpServletResponse) - Constructor for class org.springframework.security.web.context.HttpRequestResponseHolder
  Deprecated.
HttpSessionCreatedEvent - Class in org.springframework.security.web.session
  Published by the `HttpSessionEventPublisher` when an `HttpSession` is created by the container
HttpSessionCreatedEvent(HttpSession) - Constructor for class org.springframework.security.web.session.HttpSessionCreatedEvent
HttpSessionCsrfTokenRepository - Class in org.springframework.security.web.csrf
  A `CsrfTokenRepository` that stores the `CsrfToken` in the `HttpSession`.
HttpSessionCsrfTokenRepository() - Constructor for class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
HttpSessionDestroyedEvent - Class in org.springframework.security.web.session
  Published by the `HttpSessionEventPublisher` when a HttpSession is removed from the container
HttpSessionDestroyedEvent(HttpSession) - Constructor for class org.springframework.security.web.session.HttpSessionDestroyedEvent
HttpSessionEventPublisher - Class in org.springframework.security.web.session
  Declared in web.xml as
HttpSessionEventPublisher() - Constructor for class org.springframework.security.web.session.HttpSessionEventPublisher
HttpSessionIdChangedEvent - Class in org.springframework.security.web.session
  Published by the `HttpSessionEventPublisher` when an `HttpSession` ID is changed.
HttpSessionIdChangedEvent(HttpSession, String) - Constructor for class org.springframework.security.web.session.HttpSessionIdChangedEvent
HttpSessionPublicKeyCredentialCreationOptionsRepository - Class in org.springframework.security.web.webauthn.registration
HttpSessionPublicKeyCredentialCreationOptionsRepository() - Constructor for class org.springframework.security.web.webauthn.registration.HttpSessionPublicKeyCredentialCreationOptionsRepository
HttpSessionPublicKeyCredentialRequestOptionsRepository - Class in org.springframework.security.web.webauthn.authentication
  A `PublicKeyCredentialRequestOptionsRepository` that stores the `PublicKeyCredentialRequestOptions` in the `HttpSession`.
HttpSessionPublicKeyCredentialRequestOptionsRepository() - Constructor for class org.springframework.security.web.webauthn.authentication.HttpSessionPublicKeyCredentialRequestOptionsRepository
HttpSessionRequestCache - Class in org.springframework.security.web.savedrequest
  `RequestCache` which stores the `SavedRequest` in the HttpSession.
HttpSessionRequestCache() - Constructor for class org.springframework.security.web.savedrequest.HttpSessionRequestCache
HttpSessionSecurityContextRepository - Class in org.springframework.security.web.context
  A `SecurityContextRepository` implementation which stores the security context in the `HttpSession` between requests.
HttpSessionSecurityContextRepository() - Constructor for class org.springframework.security.web.context.HttpSessionSecurityContextRepository
HttpsRedirectWebFilter - Class in org.springframework.security.web.server.transport
  Redirects any non-HTTPS request to its HTTPS equivalent.
HttpsRedirectWebFilter() - Constructor for class org.springframework.security.web.server.transport.HttpsRedirectWebFilter
HttpStatusEntryPoint - Class in org.springframework.security.web.authentication
  An `AuthenticationEntryPoint` that sends a generic `HttpStatus` as a response.
HttpStatusEntryPoint(HttpStatus) - Constructor for class org.springframework.security.web.authentication.HttpStatusEntryPoint
  Creates a new instance.
HttpStatusExchangeRejectedHandler - Class in org.springframework.security.web.server.firewall
  A simple implementation of `ServerExchangeRejectedHandler` that sends an error with configurable status code.
HttpStatusExchangeRejectedHandler() - Constructor for class org.springframework.security.web.server.firewall.HttpStatusExchangeRejectedHandler
  Constructs an instance which uses `400` as response code.
HttpStatusExchangeRejectedHandler(HttpStatus) - Constructor for class org.springframework.security.web.server.firewall.HttpStatusExchangeRejectedHandler
  Constructs an instance which uses a configurable http code as response.
HttpStatusRequestRejectedHandler - Class in org.springframework.security.web.firewall
  A simple implementation of `RequestRejectedHandler` that sends an error with configurable status code.
HttpStatusRequestRejectedHandler() - Constructor for class org.springframework.security.web.firewall.HttpStatusRequestRejectedHandler
  Constructs an instance which uses `400` as response code.
HttpStatusRequestRejectedHandler(int) - Constructor for class org.springframework.security.web.firewall.HttpStatusRequestRejectedHandler
  Constructs an instance which uses a configurable http code as response.
HttpStatusReturningLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout
  Implementation of the `LogoutSuccessHandler`.
HttpStatusReturningLogoutSuccessHandler() - Constructor for class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler
  Initialize the `HttpStatusLogoutSuccessHandler` with the default `HttpStatus.OK`.
HttpStatusReturningLogoutSuccessHandler(HttpStatus) - Constructor for class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler
  Initialize the `HttpStatusLogoutSuccessHandler` with a user-defined `HttpStatus`.
HttpStatusReturningServerLogoutSuccessHandler - Class in org.springframework.security.web.server.authentication.logout
  Implementation of the `ServerLogoutSuccessHandler`.
HttpStatusReturningServerLogoutSuccessHandler() - Constructor for class org.springframework.security.web.server.authentication.logout.HttpStatusReturningServerLogoutSuccessHandler
  Initialize the `HttpStatusReturningServerLogoutSuccessHandler` with the default `HttpStatus.OK`.
HttpStatusReturningServerLogoutSuccessHandler(HttpStatus) - Constructor for class org.springframework.security.web.server.authentication.logout.HttpStatusReturningServerLogoutSuccessHandler
  Initialize the `HttpStatusReturningServerLogoutSuccessHandler` with a user-defined `HttpStatus`.
HttpStatusServerAccessDeniedHandler - Class in org.springframework.security.web.server.authorization
  Sets the provided HTTP Status when access is denied.
HttpStatusServerAccessDeniedHandler(HttpStatus) - Constructor for class org.springframework.security.web.server.authorization.HttpStatusServerAccessDeniedHandler
  Creates an instance with the provided status
HttpStatusServerEntryPoint - Class in org.springframework.security.web.server.authentication
  A `ServerAuthenticationEntryPoint` that sends a generic `HttpStatus` as a response.
HttpStatusServerEntryPoint(HttpStatus) - Constructor for class org.springframework.security.web.server.authentication.HttpStatusServerEntryPoint
HYBRID - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  hybrid indicates the respective authenticator can be contacted using a combination of (often separate) data-transport and proximity mechanisms.

## I

id(String) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getId()` property
id(String) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity.PublicKeyCredentialRpEntityBuilder
  Sets the `PublicKeyCredentialRpEntity.getId()` property.
id(Bytes) - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder
  Sets the `ImmutablePublicKeyCredentialUserEntity.getId()` property.
id(Bytes) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder
  Sets the `PublicKeyCredentialDescriptor.getId()` property.
IDENTITY - Static variable in interface org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator.HttpServletRequestTransformer
ImmutableAuthenticationExtensionsClientInput<T> - Class in org.springframework.security.web.webauthn.api
  An immutable `AuthenticationExtensionsClientInput`.
ImmutableAuthenticationExtensionsClientInput(String, T) - Constructor for class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInput
  Creates a new instance
ImmutableAuthenticationExtensionsClientInputs - Class in org.springframework.security.web.webauthn.api
  An immutable implementation of `AuthenticationExtensionsClientInputs`.
ImmutableAuthenticationExtensionsClientInputs(List<AuthenticationExtensionsClientInput>) - Constructor for class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInputs
ImmutableAuthenticationExtensionsClientInputs(AuthenticationExtensionsClientInput...) - Constructor for class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientInputs
ImmutableAuthenticationExtensionsClientOutputs - Class in org.springframework.security.web.webauthn.api
  An immutable implementation of `AuthenticationExtensionsClientOutputs`.
ImmutableAuthenticationExtensionsClientOutputs(List<AuthenticationExtensionsClientOutput<?>>) - Constructor for class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientOutputs
ImmutableAuthenticationExtensionsClientOutputs(AuthenticationExtensionsClientOutput<?>...) - Constructor for class org.springframework.security.web.webauthn.api.ImmutableAuthenticationExtensionsClientOutputs
ImmutableCredentialRecord - Class in org.springframework.security.web.webauthn.api
  An immutable `CredentialRecord`.
ImmutableCredentialRecord.ImmutableCredentialRecordBuilder - Class in org.springframework.security.web.webauthn.api
ImmutablePublicKeyCose - Class in org.springframework.security.web.webauthn.api
  An immutable `PublicKeyCose`
ImmutablePublicKeyCose(byte[]) - Constructor for class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCose
  Creates a new instance.
ImmutablePublicKeyCredentialCreationOptionsRequest - Class in org.springframework.security.web.webauthn.management
  An immutable implementation of `PublicKeyCredentialCreationOptionsRequest`.
ImmutablePublicKeyCredentialCreationOptionsRequest(Authentication) - Constructor for class org.springframework.security.web.webauthn.management.ImmutablePublicKeyCredentialCreationOptionsRequest
ImmutablePublicKeyCredentialRequestOptionsRequest - Class in org.springframework.security.web.webauthn.management
ImmutablePublicKeyCredentialRequestOptionsRequest(Authentication) - Constructor for class org.springframework.security.web.webauthn.management.ImmutablePublicKeyCredentialRequestOptionsRequest
ImmutablePublicKeyCredentialUserEntity - Class in org.springframework.security.web.webauthn.api
  PublicKeyCredentialUserEntity is used to supply additional user account attributes when creating a new credential.
ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder - Class in org.springframework.security.web.webauthn.api
  Used to build `PublicKeyCredentialUserEntity`.
ImmutableRelyingPartyRegistrationRequest - Class in org.springframework.security.web.webauthn.management
  Contains the information necessary to register a new Credential.
ImmutableRelyingPartyRegistrationRequest(PublicKeyCredentialCreationOptions, RelyingPartyPublicKey) - Constructor for class org.springframework.security.web.webauthn.management.ImmutableRelyingPartyRegistrationRequest
  Creates a new instance.
INDIRECT - Static variable in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  The indirect preference indicates that the Relying Party wants to receive a verifiable attestation statement, but allows the client to decide how to obtain such an attestation statement.
init(FilterConfig) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
  Not used (we rely on IoC container lifecycle services instead)
init(FilterConfig) - Method in class org.springframework.security.web.debug.DebugFilter
initDao() - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
initExtractorMap() - Method in class org.springframework.security.web.util.ThrowableAnalyzer
  Initializes associations between `Throwable`s and `ThrowableCauseExtractor`s.
InMemoryTokenRepositoryImpl - Class in org.springframework.security.web.authentication.rememberme
  Simple `PersistentTokenRepository` implementation backed by a Map.
InMemoryTokenRepositoryImpl() - Constructor for class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl
INSECURE_NOOP - Static variable in interface org.springframework.security.web.server.firewall.ServerWebExchangeFirewall
  An implementation of `StrictServerWebExchangeFirewall` that does nothing.
InsecureChannelProcessor - Class in org.springframework.security.web.access.channel
  Ensures channel security is inactive by review of `HttpServletRequest.isSecure()` responses.
InsecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.InsecureChannelProcessor
insertFilters(ServletContext, Filter...) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Inserts the provided `Filter`s before existing `Filter`s using default generated names, `AbstractSecurityWebApplicationInitializer.getSecurityDispatcherTypes()`, and `AbstractSecurityWebApplicationInitializer.isAsyncSecuritySupported()`.
INSTANCE - Static variable in class org.springframework.security.web.util.matcher.AnyRequestMatcher
INTERNAL - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  internal indicates the respective authenticator is contacted using a client device-specific transport, i.e., it is a platform authenticator.
InvalidateLeastUsedServerMaximumSessionsExceededHandler - Class in org.springframework.security.web.server.authentication
  Implementation of `ServerMaximumSessionsExceededHandler` that invalidates the least recently used `ReactiveSessionInformation` and removes the related sessions from the `WebSessionStore`.
InvalidateLeastUsedServerMaximumSessionsExceededHandler(WebSessionStore) - Constructor for class org.springframework.security.web.server.authentication.InvalidateLeastUsedServerMaximumSessionsExceededHandler
InvalidCookieException - Exception in org.springframework.security.web.authentication.rememberme
  Exception thrown by a RememberMeServices implementation to indicate that a submitted cookie is of an invalid format or has expired.
InvalidCookieException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.InvalidCookieException
InvalidCsrfTokenException - Exception in org.springframework.security.web.csrf
  Thrown when an expected `CsrfToken` exists, but it does not match the value present on the `HttpServletRequest`
InvalidCsrfTokenException(CsrfToken, String) - Constructor for exception org.springframework.security.web.csrf.InvalidCsrfTokenException
InvalidSessionAccessDeniedHandler - Class in org.springframework.security.web.session
  An adapter of `InvalidSessionStrategy` to `AccessDeniedHandler`
InvalidSessionAccessDeniedHandler(InvalidSessionStrategy) - Constructor for class org.springframework.security.web.session.InvalidSessionAccessDeniedHandler
  Creates a new instance
InvalidSessionStrategy - Interface in org.springframework.security.web.session
  Determines the behaviour of the `SessionManagementFilter` when an invalid session Id is submitted and detected in the `SessionManagementFilter`.
INVOCATIONTARGET_EXTRACTOR - Static variable in class org.springframework.security.web.util.ThrowableAnalyzer
  Default extractor for `InvocationTargetException` instances.
invoke(FilterInvocation) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
IpAddressAuthorizationManager - Class in org.springframework.security.web.access
  A `AuthorizationManager`, that determines if the current request contains the specified address or range of addresses
IpAddressMatcher - Class in org.springframework.security.web.util.matcher
  Matches a request based on IP Address or subnet mask matching against the remote address.
IpAddressMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.IpAddressMatcher
  Takes a specific IP address or a range specified using the IP/Netmask (e.g.
IpAddressReactiveAuthorizationManager - Class in org.springframework.security.web.server.authorization
  A `ReactiveAuthorizationManager`, that determines if the current request contains the specified address or range of addresses
IpAddressServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Matches a request based on IP Address or subnet mask matching against the remote address.
IpAddressServerWebExchangeMatcher(String) - Constructor for class org.springframework.security.web.server.util.matcher.IpAddressServerWebExchangeMatcher
  Takes a specific IP address or a range specified using the IP/Netmask (e.g.
isAbsoluteUrl(String) - Static method in class org.springframework.security.web.util.UrlUtils
  Decides if a URL is absolute based on whether it contains a valid scheme name, as defined in RFC 1738.
isAllowed(String, String, String, Authentication) - Method in class org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator
isAllowed(String, String, String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator
  Deprecated.
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI, with the given .
isAllowed(String, String, String, Authentication) - Method in class org.springframework.security.web.access.RequestMatcherDelegatingWebInvocationPrivilegeEvaluator
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI.
isAllowed(String, String, String, Authentication) - Method in interface org.springframework.security.web.access.WebInvocationPrivilegeEvaluator
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI, with the given parameters.
isAllowed(String, Authentication) - Method in class org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator
isAllowed(String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator
  Deprecated.
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI.
isAllowed(String, Authentication) - Method in class org.springframework.security.web.access.RequestMatcherDelegatingWebInvocationPrivilegeEvaluator
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI.
isAllowed(String, Authentication) - Method in interface org.springframework.security.web.access.WebInvocationPrivilegeEvaluator
  Determines whether the user represented by the supplied `Authentication` object is allowed to invoke the supplied URI.
isAllowSessionCreation() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
isAlwaysUseDefaultTargetUrl() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
isAsyncSecuritySupported() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
  Determine if the springSecurityFilterChain should be marked as supporting async.
isAuthenticated() - Method in class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler.AuthenticationSuccess
isBackupEligible() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The backupElgible flag is the same as the BE flag in authData.
isBackupEligible() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
isBackupState() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  The backupState flag is the same as the BS flag in authData.
isBackupState() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
isContextRelative() - Method in class org.springframework.security.web.DefaultRedirectStrategy
  Returns `true`, if the redirection URL should be calculated minus the protocol and context path (defaults to `false`).
isContextSaved() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
  Tells if the response wrapper has called `saveContext()` because of this wrapper.
isDisableOnResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Returns true if `OnCommittedResponseWrapper.onResponseCommitted()` will be invoked when the response is committed, else false.
isEnabled() - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
isEnforceCredentialProtectionPolicy() - Method in class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect
isForceHttps() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
isGenerated() - Method in interface org.springframework.security.web.csrf.DeferredCsrfToken
  Returns true if `DeferredCsrfToken.get()` refers to a generated `CsrfToken` or false if it already existed.
isIgnoreFailure() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
isInvalidateHttpSession() - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
isMatch() - Method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult
isMatch() - Method in class org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
isObserveOncePerRequest() - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
isObserveOncePerRequest() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
  Indicates whether once-per-request handling will be observed.
isRk() - Method in class org.springframework.security.web.webauthn.api.CredentialPropertiesOutput.ExtensionOutput
  This OPTIONAL property, known abstractly as the resident key credential property (i.e., client-side discoverable credential property), is a Boolean value indicating whether the PublicKeyCredential returned as a result of a registration ceremony is a client-side discoverable credential.
isSecure() - Method in class org.springframework.security.web.savedrequest.SavedCookie
isSuccess() - Method in class org.springframework.security.web.webauthn.registration.WebAuthnRegistrationFilter.SuccessfulUserRegistrationResponse
isTokenExpired(long) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
isUseForward() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
isUseForward() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
isUserInRole(String) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Simple searches for an exactly matching `GrantedAuthority.getAuthority()`.
isUvInitialized() - Method in interface org.springframework.security.web.webauthn.api.CredentialRecord
  uvInitialized is the value of the UV (user verified) flag in authData and indicates whether any credential from this public key credential source has had the UV flag set.
isUvInitialized() - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord
isValidRedirectUrl(String) - Static method in class org.springframework.security.web.util.UrlUtils
  Returns true if the supplied URL starts with a "/" or is absolute.

## J

J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication.preauth.j2ee
  Implementation of AuthenticationDetailsSource which converts the user's J2EE roles (as obtained by calling `HttpServletRequest.isUserInRole(String)`) into `GrantedAuthority`s and stores these in the authentication details object.
J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
j2eeMappableRoles - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
  The role attributes returned by the configured `MappableAttributesRetriever`
J2eePreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth.j2ee
  This AbstractPreAuthenticatedProcessingFilter implementation is based on the J2EE container-based authentication mechanism.
J2eePreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter
j2eeUserRoles2GrantedAuthoritiesMapper - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
JaasApiIntegrationFilter - Class in org.springframework.security.web.jaasapi
  A `Filter` which attempts to obtain a JAAS `Subject` and continue the `FilterChain` running as that `Subject`.
JaasApiIntegrationFilter() - Constructor for class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter
JdbcTokenRepositoryImpl - Class in org.springframework.security.web.authentication.rememberme
  JDBC based persistent login token repository implementation.
JdbcTokenRepositoryImpl() - Constructor for class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

## L

label(String) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
lastUsed(Instant) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
LazyCsrfTokenRepository - Class in org.springframework.security.web.csrf
  Deprecated.
  Use `CsrfTokenRepository.loadDeferredToken(HttpServletRequest, HttpServletResponse)` which returns a `DeferredCsrfToken`
LazyCsrfTokenRepository(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.LazyCsrfTokenRepository
  Deprecated.
  Creates a new instance
load(HttpServletRequest) - Method in class org.springframework.security.web.webauthn.authentication.HttpSessionPublicKeyCredentialRequestOptionsRepository
load(HttpServletRequest) - Method in interface org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsRepository
  Gets a saved `PublicKeyCredentialRequestOptions` if it exists, otherwise null.
load(HttpServletRequest) - Method in class org.springframework.security.web.webauthn.registration.HttpSessionPublicKeyCredentialCreationOptionsRepository
load(HttpServletRequest) - Method in interface org.springframework.security.web.webauthn.registration.PublicKeyCredentialCreationOptionsRepository
  Gets a saved `PublicKeyCredentialCreationOptions` if it exists, otherwise null.
load(ServerWebExchange) - Method in class org.springframework.security.web.server.context.NoOpServerSecurityContextRepository
load(ServerWebExchange) - Method in interface org.springframework.security.web.server.context.ServerSecurityContextRepository
  Loads the SecurityContext associated with the `ServerWebExchange`
load(ServerWebExchange) - Method in class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.DelegatingSecurityContextRepository
loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  Gets the security context for the current request (if available) and returns it.
loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.NullSecurityContextRepository
loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
loadContext(HttpRequestResponseHolder) - Method in interface org.springframework.security.web.context.SecurityContextRepository
  Deprecated.
  Use `SecurityContextRepository.loadDeferredContext(HttpServletRequest)` instead.
loadDeferredContext(HttpServletRequest) - Method in class org.springframework.security.web.context.DelegatingSecurityContextRepository
loadDeferredContext(HttpServletRequest) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
loadDeferredContext(HttpServletRequest) - Method in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
loadDeferredContext(HttpServletRequest) - Method in interface org.springframework.security.web.context.SecurityContextRepository
  Defers loading the `SecurityContext` using the `HttpServletRequest` until it is needed by the application.
loadDeferredToken(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository
  Defers loading the `CsrfToken` using the `HttpServletRequest` and `HttpServletResponse` until it is needed by the application.
loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
loadToken(HttpServletRequest) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository
  Loads the expected `CsrfToken` from the `HttpServletRequest`
loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository
  Deprecated.
  Delegates to the injected `CsrfTokenRepository`
loadToken(ServerWebExchange) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
loadToken(ServerWebExchange) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRepository
  Loads the expected `CsrfToken` from the `ServerWebExchange`
loadToken(ServerWebExchange) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
loadUserDetails(PreAuthenticatedAuthenticationToken) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService
  Get a UserDetails object based on the user name contained in the given token, and the GrantedAuthorities as returned by the GrantedAuthoritiesContainer implementation as returned by the token.getDetails() method.
log - Variable in class org.springframework.security.web.header.writers.frameoptions.AbstractRequestParameterAllowFromStrategy
  Deprecated.
  Logger for use by subclasses
logger - Static variable in class org.springframework.security.web.access.AccessDeniedHandlerImpl
logger - Variable in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
logger - Static variable in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator
  Deprecated.
logger - Variable in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
logger - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
logger - Variable in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
logger - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
logger - Variable in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever
logger - Variable in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
logger - Variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
logger - Variable in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler
logger - Variable in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy
logger - Variable in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
logger - Variable in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
logger - Variable in class org.springframework.security.web.DefaultRedirectStrategy
logger - Variable in class org.springframework.security.web.savedrequest.CookieRequestCache
logger - Static variable in class org.springframework.security.web.savedrequest.DefaultSavedRequest
logger - Variable in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
logger - Variable in class org.springframework.security.web.server.authentication.ServerX509AuthenticationConverter
loginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.NullRememberMeServices
loginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
loginFail(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.RememberMeServices
  Called whenever an interactive authentication attempt was made, but the credentials supplied by the user were missing or otherwise invalid.
LoginPageGeneratingWebFilter - Class in org.springframework.security.web.server.ui
  Generates a default log in page used for authenticating users.
LoginPageGeneratingWebFilter() - Constructor for class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.NullRememberMeServices
loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Called whenever an interactive authentication attempt is successful.
loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.RememberMeServices
  Called whenever an interactive authentication attempt is successful.
LoginUrlAuthenticationEntryPoint - Class in org.springframework.security.web.authentication
  Used by the `ExceptionTranslationFilter` to commence a form login authentication via the `UsernamePasswordAuthenticationFilter`.
LoginUrlAuthenticationEntryPoint(String) - Constructor for class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.CompositeLogoutHandler
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.HeaderWriterLogoutHandler
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.logout.LogoutHandler
  Causes a logout to be completed.
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.LogoutSuccessEventPublishingLogoutHandler
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
  Requires the request to be passed in.
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Implementation of `LogoutHandler`.
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.csrf.CsrfLogoutHandler
  Clears the `CsrfToken`
logout(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.DelegatingServerLogoutHandler
logout(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.HeaderWriterServerLogoutHandler
logout(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.SecurityContextServerLogoutHandler
logout(WebFilterExchange, Authentication) - Method in interface org.springframework.security.web.server.authentication.logout.ServerLogoutHandler
  Invoked when log out is requested
logout(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.WebSessionServerLogoutHandler
logout(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.csrf.CsrfServerLogoutHandler
  Clears the `CsrfToken`
LogoutFilter - Class in org.springframework.security.web.authentication.logout
  Logs a principal out.
LogoutFilter(String, LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.LogoutFilter
LogoutFilter(LogoutSuccessHandler, LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.LogoutFilter
  Constructor which takes a `LogoutSuccessHandler` instance to determine the target destination after logging out.
LogoutHandler - Interface in org.springframework.security.web.authentication.logout
  Indicates a class that is able to participate in logout handling.
LogoutPageGeneratingWebFilter - Class in org.springframework.security.web.server.ui
  Generates a default log out page.
LogoutPageGeneratingWebFilter() - Constructor for class org.springframework.security.web.server.ui.LogoutPageGeneratingWebFilter
LogoutSuccessEventPublishingLogoutHandler - Class in org.springframework.security.web.authentication.logout
  A logout handler which publishes `LogoutSuccessEvent`
LogoutSuccessEventPublishingLogoutHandler() - Constructor for class org.springframework.security.web.authentication.logout.LogoutSuccessEventPublishingLogoutHandler
LogoutSuccessHandler - Interface in org.springframework.security.web.authentication.logout
  Strategy that is called after a successful logout by the `LogoutFilter`, to handle redirection or forwarding to the appropriate destination.
LogoutWebFilter - Class in org.springframework.security.web.server.authentication.logout
  If the request matches, logs an authenticated user out by delegating to a `ServerLogoutHandler`.
LogoutWebFilter() - Constructor for class org.springframework.security.web.server.authentication.logout.LogoutWebFilter
lookupHttpPort(Integer) - Method in interface org.springframework.security.web.PortMapper
  Locates the HTTP port associated with the specified HTTPS port.
lookupHttpPort(Integer) - Method in class org.springframework.security.web.PortMapperImpl
lookupHttpsPort(Integer) - Method in interface org.springframework.security.web.PortMapper
  Locates the HTTPS port associated with the specified HTTP port.
lookupHttpsPort(Integer) - Method in class org.springframework.security.web.PortMapperImpl

## M

makeTokenSignature(long, String, String) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
  Calculates the digital signature to be put in the cookie.
makeTokenSignature(long, String, String, TokenBasedRememberMeServices.RememberMeTokenAlgorithm) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
  Calculates the digital signature to be put in the cookie.
mappings(Consumer<List<RequestMatcherEntry<AuthorizationManager<RequestAuthorizationContext>>>>) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
  Allows to configure the `RequestMatcher` to `AuthorizationManager` mappings.
MapPublicKeyCredentialUserEntityRepository - Class in org.springframework.security.web.webauthn.management
  A `Map` based implementation of `PublicKeyCredentialUserEntityRepository`.
MapPublicKeyCredentialUserEntityRepository() - Constructor for class org.springframework.security.web.webauthn.management.MapPublicKeyCredentialUserEntityRepository
MapUserCredentialRepository - Class in org.springframework.security.web.webauthn.management
  A `Map` based implementation of `UserCredentialRepository`.
MapUserCredentialRepository() - Constructor for class org.springframework.security.web.webauthn.management.MapUserCredentialRepository
match() - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult
  Creates an instance of `ServerWebExchangeMatcher.MatchResult` that is a match with no variables
match() - Static method in class org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
  Creates an instance of `RequestMatcher.MatchResult` that is a match with no variables
match(Map<String, Object>) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult
  Creates an instance of `ServerWebExchangeMatcher.MatchResult` that is a match with the specified variables
match(Map<String, String>) - Static method in class org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
  Creates an instance of `RequestMatcher.MatchResult` that is a match with the specified variables
matcher(HttpServletRequest) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
matcher(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AndRequestMatcher
  Returns a `RequestMatcher.MatchResult` for this `HttpServletRequest`.
matcher(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
matcher(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.OrRequestMatcher
  Returns a `RequestMatcher.MatchResult` for this `HttpServletRequest`.
matcher(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ParameterRequestMatcher
matcher(HttpServletRequest) - Method in interface org.springframework.security.web.util.matcher.RequestMatcher
  Returns a MatchResult for this RequestMatcher The default implementation returns `Collections.emptyMap()` when `RequestMatcher.MatchResult.getVariables()` is invoked.
matchers(ServerWebExchangeMatcher...) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Creates a matcher that will match on any of the provided matchers
MatcherSecurityWebFilterChain - Class in org.springframework.security.web.server
  A `SecurityWebFilterChain` that leverages a `ServerWebExchangeMatcher` to determine which `WebFilter` to execute.
MatcherSecurityWebFilterChain(ServerWebExchangeMatcher, List<WebFilter>) - Constructor for class org.springframework.security.web.server.MatcherSecurityWebFilterChain
matches(HttpServletRequest) - Method in class org.springframework.security.web.DefaultSecurityFilterChain
matches(HttpServletRequest) - Method in interface org.springframework.security.web.SecurityFilterChain
matches(HttpServletRequest) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AndRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
  Returns true if the configured pattern (and HTTP-Method) match those of the supplied request.
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.DispatcherTypeRequestMatcher
  Performs the match against the request's method and dispatcher type.
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ELRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.IpAddressMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.NegatedRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.OrRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ParameterRequestMatcher
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.RegexRequestMatcher
  Performs the match of the request URL (`servletPath + pathInfo + queryString` ) against the compiled pattern.
matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher
matches(HttpServletRequest) - Method in interface org.springframework.security.web.util.matcher.RequestMatcher
  Decides whether the rule implemented by the strategy matches the supplied request.
matches(String) - Method in class org.springframework.security.web.util.matcher.IpAddressMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.AuthenticationConverterServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.MatcherSecurityWebFilterChain
matches(ServerWebExchange) - Method in interface org.springframework.security.web.server.SecurityWebFilterChain
  Determines if this `SecurityWebFilterChain` matches the provided `ServerWebExchange`
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.IpAddressServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.NegatedServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.OrServerWebExchangeMatcher
matches(ServerWebExchange) - Method in class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
matches(ServerWebExchange) - Method in interface org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher
  Determines if a request matches or not
MaximumSessionsContext - Class in org.springframework.security.web.server.authentication
MaximumSessionsContext(Authentication, List<ReactiveSessionInformation>, int, WebSession) - Constructor for class org.springframework.security.web.server.authentication.MaximumSessionsContext
MD5 - Enum constant in enum class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.RememberMeTokenAlgorithm
MediaTypeRequestMatcher - Class in org.springframework.security.web.util.matcher
  Allows matching `HttpServletRequest` based upon the `MediaType`'s resolved from a `ContentNegotiationStrategy`.
MediaTypeRequestMatcher(Collection<MediaType>) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  Creates an instance
MediaTypeRequestMatcher(MediaType...) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  Creates an instance
MediaTypeRequestMatcher(ContentNegotiationStrategy, Collection<MediaType>) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  Creates an instance
MediaTypeRequestMatcher(ContentNegotiationStrategy, MediaType...) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  Creates an instance
MediaTypeServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Matches based upon the accept headers.
MediaTypeServerWebExchangeMatcher(Collection<MediaType>) - Constructor for class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
  Creates a new instance
MediaTypeServerWebExchangeMatcher(MediaType...) - Constructor for class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
  Creates a new instance
messages - Variable in class org.springframework.security.web.access.ExceptionTranslationFilter
messages - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
messages - Variable in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
messages - Variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
messages - Variable in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
messages - Variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
messages - Variable in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
MissingCsrfTokenException - Exception in org.springframework.security.web.csrf
  Thrown when no expected `CsrfToken` is found but is required.
MissingCsrfTokenException(String) - Constructor for exception org.springframework.security.web.csrf.MissingCsrfTokenException
modifyGrantedAuthorities(UserDetails, Authentication, Collection<? extends GrantedAuthority>) - Method in interface org.springframework.security.web.authentication.switchuser.SwitchUserAuthorityChanger
  Allow subclasses to add or remove authorities that will be granted when in switch user mode.
MvcRequestMatcher - Class in org.springframework.security.web.servlet.util.matcher
  A `RequestMatcher` that uses Spring MVC's `HandlerMappingIntrospector` to match the path and extract variables.
MvcRequestMatcher(HandlerMappingIntrospector, String) - Constructor for class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
MvcRequestMatcher.Builder - Class in org.springframework.security.web.servlet.util.matcher
  A builder for `MvcRequestMatcher`

## N

name(String) - Method in class org.springframework.security.web.webauthn.api.ImmutablePublicKeyCredentialUserEntity.PublicKeyCredentialUserEntityBuilder
  Sets the `ImmutablePublicKeyCredentialUserEntity.getName()` property.
name(String) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRpEntity.PublicKeyCredentialRpEntityBuilder
  Sets the `PublicKeyCredentialRpEntity.getName()` property.
NegatedRequestMatcher - Class in org.springframework.security.web.util.matcher
  A `RequestMatcher` that will negate the `RequestMatcher` passed in.
NegatedRequestMatcher(RequestMatcher) - Constructor for class org.springframework.security.web.util.matcher.NegatedRequestMatcher
  Creates a new instance
NegatedServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Negates the provided matcher.
NegatedServerWebExchangeMatcher(ServerWebExchangeMatcher) - Constructor for class org.springframework.security.web.server.util.matcher.NegatedServerWebExchangeMatcher
nextElement() - Method in class org.springframework.security.web.savedrequest.Enumerator
  Returns the next element of this enumeration if this enumeration has at least one more element to provide.
NFC - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  nfc indicates the respective authenticator can be contacted over Near Field Communication (NFC).
NO_REFERRER - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
NO_REFERRER - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
NO_REFERRER_WHEN_DOWNGRADE - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
NO_REFERRER_WHEN_DOWNGRADE - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
NonceExpiredException - Exception in org.springframework.security.web.authentication.www
  Thrown if an authentication request is rejected because the digest nonce has expired.
NonceExpiredException(String) - Constructor for exception org.springframework.security.web.authentication.www.NonceExpiredException
  Constructs a `NonceExpiredException` with the specified message.
NonceExpiredException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.www.NonceExpiredException
  Constructs a `NonceExpiredException` with the specified message and root cause.
NONE - Static variable in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  The none preference indicates that the Relying Party is not interested in authenticator attestation.
NoOpAccessDeniedHandler - Class in org.springframework.security.web.access
  An `AccessDeniedHandler` implementation that does nothing.
NoOpAccessDeniedHandler() - Constructor for class org.springframework.security.web.access.NoOpAccessDeniedHandler
NoOpAuthenticationEntryPoint - Class in org.springframework.security.web.authentication
  An `AuthenticationEntryPoint` implementation that does nothing.
NoOpAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.authentication.NoOpAuthenticationEntryPoint
NoOpServerRequestCache - Class in org.springframework.security.web.server.savedrequest
  An implementation of `ServerRequestCache` that does nothing.
NoOpServerSecurityContextRepository - Class in org.springframework.security.web.server.context
  A do nothing implementation of `ServerSecurityContextRepository`.
NOSNIFF - Static variable in class org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter
NOSNIFF - Static variable in class org.springframework.security.web.server.header.XContentTypeOptionsServerHttpHeadersWriter
not(RequestMatcher) - Static method in class org.springframework.security.web.util.matcher.RequestMatchers
  Creates a `RequestMatcher` that matches if the given `RequestMatcher` does not match.
notMatch() - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult
  Creates an instance of `ServerWebExchangeMatcher.MatchResult` that is not a match.
notMatch() - Static method in class org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
  Creates an instance of `RequestMatcher.MatchResult` that is not a match.
NullAuthenticatedSessionStrategy - Class in org.springframework.security.web.authentication.session
NullAuthenticatedSessionStrategy() - Constructor for class org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy
NullEventPublisher() - Constructor for class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy.NullEventPublisher
NullRememberMeServices - Class in org.springframework.security.web.authentication
  Implementation of `NullRememberMeServices` that does nothing.
NullRememberMeServices() - Constructor for class org.springframework.security.web.authentication.NullRememberMeServices
NullRequestCache - Class in org.springframework.security.web.savedrequest
  Null implementation of `RequestCache`.
NullRequestCache() - Constructor for class org.springframework.security.web.savedrequest.NullRequestCache
NullSecurityContextRepository - Class in org.springframework.security.web.context
NullSecurityContextRepository() - Constructor for class org.springframework.security.web.context.NullSecurityContextRepository

## O

ObservationFilterChainDecorator - Class in org.springframework.security.web
  A `FilterChainProxy.FilterChainDecorator` that wraps the chain in before and after observations
ObservationFilterChainDecorator(ObservationRegistry) - Constructor for class org.springframework.security.web.ObservationFilterChainDecorator
ObservationMarkingAccessDeniedHandler - Class in org.springframework.security.web.access
ObservationMarkingAccessDeniedHandler(ObservationRegistry) - Constructor for class org.springframework.security.web.access.ObservationMarkingAccessDeniedHandler
ObservationMarkingRequestRejectedHandler - Class in org.springframework.security.web.firewall
ObservationMarkingRequestRejectedHandler(ObservationRegistry) - Constructor for class org.springframework.security.web.firewall.ObservationMarkingRequestRejectedHandler
ObservationWebFilterChainDecorator - Class in org.springframework.security.web.server
  A `WebFilterChainProxy.WebFilterChainDecorator` that wraps the chain in before and after observations
ObservationWebFilterChainDecorator(ObservationRegistry) - Constructor for class org.springframework.security.web.server.ObservationWebFilterChainDecorator
obtainPassword(HttpServletRequest) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Enables subclasses to override the composition of the password, such as by including additional values and a separator.
obtainSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
obtainSubject(ServletRequest) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter
  Obtains the `Subject` to run as or `null` if no `Subject` is available.
obtainUsername(HttpServletRequest) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Enables subclasses to override the composition of the username, such as by including additional values and a separator.
of(int) - Static method in interface org.springframework.security.web.server.authentication.SessionLimit
  Creates a `SessionLimit` that always returns the given value for any user
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy
  Called when a user is newly authenticated.
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  In addition to the steps from the superclass, the sessionRegistry will be updated with the new session information.
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy
  In addition to the steps from the superclass, the sessionRegistry will be updated with the new session information.
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.session.SessionAuthenticationStrategy
  Performs Http session-related functionality when a new authentication occurs.
onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.CsrfAuthenticationStrategy
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.AuthenticationEntryPointFailureHandler
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in interface org.springframework.security.web.authentication.AuthenticationFailureHandler
  Called when an authentication attempt fails.
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationFailureHandler
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.ForwardAuthenticationFailureHandler
onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
  Performs the redirect or forward to the `defaultFailureUrl` if set, otherwise returns a 401 error code.
onAuthenticationFailure(WebFilterExchange, AuthenticationException) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler
onAuthenticationFailure(WebFilterExchange, AuthenticationException) - Method in class org.springframework.security.web.server.authentication.ServerAuthenticationEntryPointFailureHandler
onAuthenticationFailure(WebFilterExchange, AuthenticationException) - Method in interface org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler
  Invoked when authentication attempt fails
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, FilterChain, Authentication) - Method in interface org.springframework.security.web.authentication.AuthenticationSuccessHandler
  Called when a user has been successfully authenticated.
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.AuthenticationSuccessHandler
  Called when a user has been successfully authenticated.
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.ForwardAuthenticationSuccessHandler
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler
onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler
  Calls the parent class `handle()` method to forward or redirect to the target URL, and then calls `clearAuthenticationAttributes()` to remove any leftover session data.
onAuthenticationSuccess(Authentication, WebFilterExchange) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.ConcurrentSessionControlServerAuthenticationSuccessHandler
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationSuccessHandler
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.RegisterSessionServerAuthenticationSuccessHandler
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in interface org.springframework.security.web.server.authentication.ServerAuthenticationSuccessHandler
  Invoked when the application authenticates successfully
onAuthenticationSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.WebFilterChainServerAuthenticationSuccessHandler
OnCommittedResponseWrapper - Class in org.springframework.security.web.util
  Base class for response wrappers which encapsulate the logic for handling an event when the `HttpServletResponse` is committed.
OnCommittedResponseWrapper(HttpServletResponse) - Constructor for class org.springframework.security.web.util.OnCommittedResponseWrapper
OneTimeTokenAuthenticationConverter - Class in org.springframework.security.web.authentication.ott
  An implementation of `AuthenticationConverter` that detects if the request contains a `token` parameter and constructs a `OneTimeTokenAuthenticationToken` with it.
OneTimeTokenAuthenticationConverter() - Constructor for class org.springframework.security.web.authentication.ott.OneTimeTokenAuthenticationConverter
OneTimeTokenGenerationSuccessHandler - Interface in org.springframework.security.web.authentication.ott
  Defines a strategy to handle generated one-time tokens.
OneTimeTokenSubmitPageGeneratingWebFilter - Class in org.springframework.security.web.server.ui
  Creates a default one-time token submit page.
OneTimeTokenSubmitPageGeneratingWebFilter() - Constructor for class org.springframework.security.web.server.ui.OneTimeTokenSubmitPageGeneratingWebFilter
onExpiredSessionDetected(SessionInformationExpiredEvent) - Method in interface org.springframework.security.web.session.SessionInformationExpiredStrategy
onExpiredSessionDetected(SessionInformationExpiredEvent) - Method in class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy
onInvalidSessionDetected(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.session.InvalidSessionStrategy
onInvalidSessionDetected(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.session.RequestedUrlRedirectInvalidSessionStrategy
onInvalidSessionDetected(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy
onLoginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Called from loginSuccess when a remember-me login has been requested.
onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
  Creates a new persistent login token with a new series number, stores the data in the persistent token repository and adds the corresponding cookie to the response.
onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler
onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.ForwardLogoutSuccessHandler
onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler
  Implementation of `LogoutSuccessHandler.onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication)` .
onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.logout.LogoutSuccessHandler
onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler
onLogoutSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.HttpStatusReturningServerLogoutSuccessHandler
  Implementation of `ServerLogoutSuccessHandler.onLogoutSuccess(WebFilterExchange, Authentication)`.
onLogoutSuccess(WebFilterExchange, Authentication) - Method in class org.springframework.security.web.server.authentication.logout.RedirectServerLogoutSuccessHandler
onLogoutSuccess(WebFilterExchange, Authentication) - Method in interface org.springframework.security.web.server.authentication.logout.ServerLogoutSuccessHandler
  Invoked after log out was successful
onResponseCommitted() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
  Calls `saveContext()` with the current contents of the `SecurityContextHolder` as long as `()` was not invoked.
onResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Implement the logic for handling the `HttpServletResponse` being committed
onSessionChange(String, HttpSession, Authentication) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy
  Called when the session has been changed and the old attributes have been migrated to the new session.
onStartup(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer
onSuccessfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  Called if a remember-me token is presented and successfully authenticated by the `RememberMeServices` `autoLogin` method and the `AuthenticationManager`.
onSuccessfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
onUnsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  Called if the `AuthenticationManager` rejects the authentication object returned from the `RememberMeServices` `autoLogin` method.
onUnsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
OPENER_POLICY - Static variable in class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter
org.springframework.security.web - package org.springframework.security.web
  Spring Security's web security module.
org.springframework.security.web.access - package org.springframework.security.web.access
  Access-control related classes and packages.
org.springframework.security.web.access.channel - package org.springframework.security.web.access.channel
  Classes that ensure web requests are received over required transport channels.
org.springframework.security.web.access.expression - package org.springframework.security.web.access.expression
  Implementation of web security expressions.
org.springframework.security.web.access.intercept - package org.springframework.security.web.access.intercept
  Enforcement of security for HTTP requests, typically by the URL requested.
org.springframework.security.web.authentication - package org.springframework.security.web.authentication
  Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).
org.springframework.security.web.authentication.logout - package org.springframework.security.web.authentication.logout
  Logout functionality based around a filter which handles a specific logout URL.
org.springframework.security.web.authentication.ott - package org.springframework.security.web.authentication.ott
org.springframework.security.web.authentication.password - package org.springframework.security.web.authentication.password
org.springframework.security.web.authentication.preauth - package org.springframework.security.web.authentication.preauth
  Support for "pre-authenticated" scenarios, where Spring Security assumes the incoming request has already been authenticated by some externally configured system.
org.springframework.security.web.authentication.preauth.j2ee - package org.springframework.security.web.authentication.preauth.j2ee
  Pre-authentication support for container-authenticated requests.
org.springframework.security.web.authentication.preauth.websphere - package org.springframework.security.web.authentication.preauth.websphere
  Websphere-specific pre-authentication classes.
org.springframework.security.web.authentication.preauth.x509 - package org.springframework.security.web.authentication.preauth.x509
  X.509 client certificate authentication support.
org.springframework.security.web.authentication.rememberme - package org.springframework.security.web.authentication.rememberme
  Support for remembering a user between different web sessions.
org.springframework.security.web.authentication.session - package org.springframework.security.web.authentication.session
  Strategy interface and implementations for handling session-related behaviour for a newly authenticated user.
org.springframework.security.web.authentication.switchuser - package org.springframework.security.web.authentication.switchuser
  Provides HTTP-based "switch user" (su) capabilities.
org.springframework.security.web.authentication.ui - package org.springframework.security.web.authentication.ui
  Authentication user-interface rendering code.
org.springframework.security.web.authentication.www - package org.springframework.security.web.authentication.www
  WWW-Authenticate based authentication mechanism implementations: Basic and Digest authentication.
org.springframework.security.web.bind.annotation - package org.springframework.security.web.bind.annotation
org.springframework.security.web.bind.support - package org.springframework.security.web.bind.support
org.springframework.security.web.context - package org.springframework.security.web.context
  Classes which are responsible for maintaining the security context between HTTP requests.
org.springframework.security.web.context.request.async - package org.springframework.security.web.context.request.async
org.springframework.security.web.context.support - package org.springframework.security.web.context.support
org.springframework.security.web.csrf - package org.springframework.security.web.csrf
org.springframework.security.web.debug - package org.springframework.security.web.debug
org.springframework.security.web.firewall - package org.springframework.security.web.firewall
org.springframework.security.web.header - package org.springframework.security.web.header
org.springframework.security.web.header.writers - package org.springframework.security.web.header.writers
org.springframework.security.web.header.writers.frameoptions - package org.springframework.security.web.header.writers.frameoptions
org.springframework.security.web.http - package org.springframework.security.web.http
org.springframework.security.web.jaasapi - package org.springframework.security.web.jaasapi
  Makes a JAAS Subject available as the current Subject.
org.springframework.security.web.jackson2 - package org.springframework.security.web.jackson2
  Mix-in classes to provide Jackson serialization support.
org.springframework.security.web.method.annotation - package org.springframework.security.web.method.annotation
org.springframework.security.web.reactive.result.method.annotation - package org.springframework.security.web.reactive.result.method.annotation
org.springframework.security.web.reactive.result.view - package org.springframework.security.web.reactive.result.view
org.springframework.security.web.savedrequest - package org.springframework.security.web.savedrequest
  Classes related to the caching of an `HttpServletRequest` which requires authentication.
org.springframework.security.web.server - package org.springframework.security.web.server
org.springframework.security.web.server.authentication - package org.springframework.security.web.server.authentication
org.springframework.security.web.server.authentication.logout - package org.springframework.security.web.server.authentication.logout
org.springframework.security.web.server.authentication.ott - package org.springframework.security.web.server.authentication.ott
org.springframework.security.web.server.authorization - package org.springframework.security.web.server.authorization
org.springframework.security.web.server.context - package org.springframework.security.web.server.context
org.springframework.security.web.server.csrf - package org.springframework.security.web.server.csrf
org.springframework.security.web.server.firewall - package org.springframework.security.web.server.firewall
org.springframework.security.web.server.header - package org.springframework.security.web.server.header
org.springframework.security.web.server.jackson2 - package org.springframework.security.web.server.jackson2
org.springframework.security.web.server.savedrequest - package org.springframework.security.web.server.savedrequest
org.springframework.security.web.server.transport - package org.springframework.security.web.server.transport
org.springframework.security.web.server.ui - package org.springframework.security.web.server.ui
org.springframework.security.web.server.util.matcher - package org.springframework.security.web.server.util.matcher
org.springframework.security.web.servlet.support.csrf - package org.springframework.security.web.servlet.support.csrf
org.springframework.security.web.servlet.util.matcher - package org.springframework.security.web.servlet.util.matcher
org.springframework.security.web.servletapi - package org.springframework.security.web.servletapi
  Populates a Servlet request with a new Spring Security compliant `HttpServletRequestWrapper`.
org.springframework.security.web.session - package org.springframework.security.web.session
  Session management filters, `HttpSession` events and publisher classes.
org.springframework.security.web.util - package org.springframework.security.web.util
  Web utility classes.
org.springframework.security.web.util.matcher - package org.springframework.security.web.util.matcher
org.springframework.security.web.webauthn.api - package org.springframework.security.web.webauthn.api
org.springframework.security.web.webauthn.authentication - package org.springframework.security.web.webauthn.authentication
org.springframework.security.web.webauthn.jackson - package org.springframework.security.web.webauthn.jackson
org.springframework.security.web.webauthn.management - package org.springframework.security.web.webauthn.management
org.springframework.security.web.webauthn.registration - package org.springframework.security.web.webauthn.registration
ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
ORIGIN_WHEN_CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
ORIGIN_WHEN_CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
OrRequestMatcher - Class in org.springframework.security.web.util.matcher
  `RequestMatcher` that will return true if any of the passed in `RequestMatcher` instances match.
OrRequestMatcher(List<RequestMatcher>) - Constructor for class org.springframework.security.web.util.matcher.OrRequestMatcher
  Creates a new instance
OrRequestMatcher(RequestMatcher...) - Constructor for class org.springframework.security.web.util.matcher.OrRequestMatcher
  Creates a new instance
OrServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Matches if any of the provided `ServerWebExchangeMatcher` match
OrServerWebExchangeMatcher(List<ServerWebExchangeMatcher>) - Constructor for class org.springframework.security.web.server.util.matcher.OrServerWebExchangeMatcher
OrServerWebExchangeMatcher(ServerWebExchangeMatcher...) - Constructor for class org.springframework.security.web.server.util.matcher.OrServerWebExchangeMatcher

## P

ParameterRequestMatcher - Class in org.springframework.security.web.util.matcher
  A `RequestMatcher` for matching on a request parameter and its value.
ParameterRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.ParameterRequestMatcher
ParameterRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.ParameterRequestMatcher
parseCache - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Parser cache.
parseDate(String, DateFormat[]) - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat
  Tries to parse the given date as an HTTP date.
pathMatchers(String...) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Creates a matcher that matches on any of the provided patterns.
pathMatchers(HttpMethod, String...) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Creates a matcher that matches on the specific method and any of the provided patterns.
pathMatchers(HttpMethod, PathPattern...) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Creates a matcher that matches on the specific method and any of the provided `PathPattern`s.
pathMatchers(PathPattern...) - Static method in class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers
  Creates a matcher that matches on any of the provided `PathPattern`s.
PathPatternParserServerWebExchangeMatcher - Class in org.springframework.security.web.server.util.matcher
  Matches if the `PathPattern` matches the path within the application.
PathPatternParserServerWebExchangeMatcher(String) - Constructor for class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
PathPatternParserServerWebExchangeMatcher(String, HttpMethod) - Constructor for class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
PathPatternParserServerWebExchangeMatcher(PathPattern) - Constructor for class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
PathPatternParserServerWebExchangeMatcher(PathPattern, HttpMethod) - Constructor for class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
pattern(String) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher.Builder
  Creates an `MvcRequestMatcher` that uses the provided pattern to match
pattern(HttpMethod, String) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher.Builder
  Creates an `MvcRequestMatcher` that uses the provided pattern and HTTP method to match
PERMISSIONS_POLICY - Static variable in class org.springframework.security.web.server.header.PermissionsPolicyServerHttpHeadersWriter
PermissionsPolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for Permisisons Policy.
PermissionsPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.PermissionsPolicyHeaderWriter
  Create a new instance of `PermissionsPolicyHeaderWriter`.
PermissionsPolicyHeaderWriter(String) - Constructor for class org.springframework.security.web.header.writers.PermissionsPolicyHeaderWriter
  Create a new instance of `PermissionsPolicyHeaderWriter` with supplied security policy.
PermissionsPolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the `Permissions-Policy` response header with configured policy directives.
PermissionsPolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.PermissionsPolicyServerHttpHeadersWriter
permitAll() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are allowed by anyone.
PersistentRememberMeToken - Class in org.springframework.security.web.authentication.rememberme
PersistentRememberMeToken(String, String, String, Date) - Constructor for class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken
PersistentTokenBasedRememberMeServices - Class in org.springframework.security.web.authentication.rememberme
  `RememberMeServices` implementation based on Barry Jaspan's Improved Persistent Login Cookie Best Practice.
PersistentTokenBasedRememberMeServices(String, UserDetailsService, PersistentTokenRepository) - Constructor for class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
PersistentTokenRepository - Interface in org.springframework.security.web.authentication.rememberme
  The abstraction used by `PersistentTokenBasedRememberMeServices` to store the persistent login tokens for a user.
PLATFORM - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
  Indicates platform attachment.
PortMapper - Interface in org.springframework.security.web
  `PortMapper` implementations provide callers with information about which HTTP ports are associated with which HTTPS ports on the system, and vice versa.
PortMapperImpl - Class in org.springframework.security.web
  Concrete implementation of `PortMapper` that obtains HTTP:HTTPS pairs from the application context.
PortMapperImpl() - Constructor for class org.springframework.security.web.PortMapperImpl
PortResolver - Interface in org.springframework.security.web
  A `PortResolver` determines the port a web request was received on.
PortResolverImpl - Class in org.springframework.security.web
  Concrete implementation of `PortResolver` that obtains the port from `ServletRequest.getServerPort()`.
PortResolverImpl() - Constructor for class org.springframework.security.web.PortResolverImpl
postProcess(NativeWebRequest, Callable<T>, Object) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
PRAGMA_VALUE - Static variable in class org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter
  The value for pragma value
PreAuthenticatedAuthenticationProvider - Class in org.springframework.security.web.authentication.preauth
  Processes a pre-authenticated authentication request.
PreAuthenticatedAuthenticationProvider() - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
PreAuthenticatedAuthenticationToken - Class in org.springframework.security.web.authentication.preauth
  `Authentication` implementation for pre-authenticated authentication.
PreAuthenticatedAuthenticationToken(Object, Object) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken
  Constructor used for an authentication request.
PreAuthenticatedAuthenticationToken(Object, Object, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken
  Constructor used for an authentication response.
PreAuthenticatedCredentialsNotFoundException - Exception in org.springframework.security.web.authentication.preauth
PreAuthenticatedCredentialsNotFoundException(String) - Constructor for exception org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException
PreAuthenticatedCredentialsNotFoundException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException
PreAuthenticatedGrantedAuthoritiesUserDetailsService - Class in org.springframework.security.web.authentication.preauth
  This AuthenticationUserDetailsService implementation creates a UserDetails object based solely on the information contained in the given PreAuthenticatedAuthenticationToken.
PreAuthenticatedGrantedAuthoritiesUserDetailsService() - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService
PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails - Class in org.springframework.security.web.authentication.preauth
  This WebAuthenticationDetails implementation allows for storing a list of pre-authenticated Granted Authorities.
PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(HttpServletRequest, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails
PREFERRED - Static variable in class org.springframework.security.web.webauthn.api.ResidentKeyRequirement
  The preferred requirement indicates that the Relying Party strongly prefers creating a client-side discoverable credential, but will accept a server-side credential.
PREFERRED - Static variable in class org.springframework.security.web.webauthn.api.UserVerificationRequirement
  The preferred value indicates that the Relying Party prefers user verification for the operation if possible, but will not fail the operation if the response does not have the UV flag set.
preProcess(NativeWebRequest, Callable<T>) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
PreventLoginServerMaximumSessionsExceededHandler - Class in org.springframework.security.web.server.authentication
  Returns a `Mono` that terminates with `SessionAuthenticationException` when the maximum number of sessions for a user has been reached.
PreventLoginServerMaximumSessionsExceededHandler() - Constructor for class org.springframework.security.web.server.authentication.PreventLoginServerMaximumSessionsExceededHandler
principalChanged(HttpServletRequest, Authentication) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Determines if the current principal has changed.
processAction(HttpServletRequest, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
processAction(HttpServletRequest, String, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
processAction(ServerWebExchange, String, String) - Method in class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Called from autoLogin to process the submitted persistent login cookie.
processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
  Locates the presented cookie data in the token repository, using the series id.
processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
processFormFieldValue(HttpServletRequest, String, String, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
processFormFieldValue(ServerWebExchange, String, String, String) - Method in class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
processUrl(HttpServletRequest, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor
processUrl(ServerWebExchange, String) - Method in class org.springframework.security.web.reactive.result.view.CsrfRequestDataValueProcessor
pubKeyCredParams(List<PublicKeyCredentialParameters>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getPubKeyCredParams()` property.
pubKeyCredParams(PublicKeyCredentialParameters...) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getPubKeyCredParams()` property.
PUBLIC_KEY - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialType
  The only credential type that currently exists.
publicKey(PublicKeyCose) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
PublicKeyCose - Interface in org.springframework.security.web.webauthn.api
  A COSE encoded public key.
PublicKeyCredential<R extends AuthenticatorResponse> - Class in org.springframework.security.web.webauthn.api
  PublicKeyCredential contains the attributes that are returned to the caller when a new credential is created, or a new assertion is requested.
PublicKeyCredential.PublicKeyCredentialBuilder<R extends AuthenticatorResponse> - Class in org.springframework.security.web.webauthn.api
  The `PublicKeyCredential.PublicKeyCredentialBuilder`
PublicKeyCredentialCreationOptions - Class in org.springframework.security.web.webauthn.api
  Represents the PublicKeyCredentialCreationOptions which is an argument to creating a new credential.
PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder - Class in org.springframework.security.web.webauthn.api
  Used to build `PublicKeyCredentialCreationOptions`.
PublicKeyCredentialCreationOptionsFilter - Class in org.springframework.security.web.webauthn.registration
  A `Filter` that renders the `PublicKeyCredentialCreationOptions` for creating a new credential.
PublicKeyCredentialCreationOptionsFilter(WebAuthnRelyingPartyOperations) - Constructor for class org.springframework.security.web.webauthn.registration.PublicKeyCredentialCreationOptionsFilter
  Creates a new instance.
PublicKeyCredentialCreationOptionsRepository - Interface in org.springframework.security.web.webauthn.registration
  Saves `PublicKeyCredentialCreationOptions` between a request to generate an assertion and the validation of the assertion.
PublicKeyCredentialCreationOptionsRequest - Interface in org.springframework.security.web.webauthn.management
  A request to create a new `PublicKeyCredentialCreationOptions`.
PublicKeyCredentialDescriptor - Class in org.springframework.security.web.webauthn.api
  PublicKeyCredentialDescriptor identifies a specific public key credential.
PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder - Class in org.springframework.security.web.webauthn.api
  Used to create `PublicKeyCredentialDescriptor`
PublicKeyCredentialParameters - Class in org.springframework.security.web.webauthn.api
  The PublicKeyCredentialParameters is used to supply additional parameters when creating a new credential.
PublicKeyCredentialRequestOptions - Class in org.springframework.security.web.webauthn.api
  PublicKeyCredentialRequestOptions contains the information to create an assertion used for authentication.
PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder - Class in org.springframework.security.web.webauthn.api
  Used to build a `PublicKeyCredentialCreationOptions`.
PublicKeyCredentialRequestOptionsFilter - Class in org.springframework.security.web.webauthn.authentication
  A `Filter` that renders the `PublicKeyCredentialRequestOptions` in order to get a credential.
PublicKeyCredentialRequestOptionsFilter(WebAuthnRelyingPartyOperations) - Constructor for class org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsFilter
  Creates a new instance with the provided `WebAuthnRelyingPartyOperations`.
PublicKeyCredentialRequestOptionsRepository - Interface in org.springframework.security.web.webauthn.authentication
  Saves `PublicKeyCredentialRequestOptions` between a request to generate an assertion and the validation of the assertion.
PublicKeyCredentialRequestOptionsRequest - Interface in org.springframework.security.web.webauthn.management
PublicKeyCredentialRpEntity - Class in org.springframework.security.web.webauthn.api
  The PublicKeyCredentialRpEntity dictionary is used to supply additional Relying Party attributes when creating a new credential.
PublicKeyCredentialRpEntity.PublicKeyCredentialRpEntityBuilder - Class in org.springframework.security.web.webauthn.api
  Used to create a `PublicKeyCredentialRpEntity`.
PublicKeyCredentialType - Class in org.springframework.security.web.webauthn.api
  The PublicKeyCredentialType defines the credential types.
PublicKeyCredentialUserEntity - Interface in org.springframework.security.web.webauthn.api
  PublicKeyCredentialUserEntity is used to supply additional user account attributes when creating a new credential.
PublicKeyCredentialUserEntityRepository - Interface in org.springframework.security.web.webauthn.management
  A repository for managing `PublicKeyCredentialUserEntity` instances.
publishEvent(Object) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy.NullEventPublisher
publishEvent(ApplicationEvent) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy.NullEventPublisher

## R

random() - Static method in class org.springframework.security.web.webauthn.api.Bytes
  Creates a secure random `Bytes` with random bytes and sufficient entropy.
rawId(Bytes) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getRawId()` property.
ReactivePreAuthenticatedAuthenticationManager - Class in org.springframework.security.web.server.authentication
  Reactive version of `PreAuthenticatedAuthenticationProvider` This manager receives a `PreAuthenticatedAuthenticationToken`, checks that associated account is not disabled, expired, or blocked, and returns new authenticated `PreAuthenticatedAuthenticationToken`.
ReactivePreAuthenticatedAuthenticationManager(ReactiveUserDetailsService) - Constructor for class org.springframework.security.web.server.authentication.ReactivePreAuthenticatedAuthenticationManager
ReactivePreAuthenticatedAuthenticationManager(ReactiveUserDetailsService, UserDetailsChecker) - Constructor for class org.springframework.security.web.server.authentication.ReactivePreAuthenticatedAuthenticationManager
ReactorContextWebFilter - Class in org.springframework.security.web.server.context
  Uses a `ServerSecurityContextRepository` to provide the `SecurityContext` to initialize the `ReactiveSecurityContextHolder`.
ReactorContextWebFilter(ServerSecurityContextRepository) - Constructor for class org.springframework.security.web.server.context.ReactorContextWebFilter
RedirectOneTimeTokenGenerationSuccessHandler - Class in org.springframework.security.web.authentication.ott
  A `OneTimeTokenGenerationSuccessHandler` that performs a redirect to a specific location
RedirectOneTimeTokenGenerationSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.ott.RedirectOneTimeTokenGenerationSuccessHandler
  Constructs an instance of this class that redirects to the specified URL.
RedirectServerAuthenticationEntryPoint - Class in org.springframework.security.web.server.authentication
  Performs a redirect to a specified location.
RedirectServerAuthenticationEntryPoint(String) - Constructor for class org.springframework.security.web.server.authentication.RedirectServerAuthenticationEntryPoint
  Creates an instance
RedirectServerAuthenticationFailureHandler - Class in org.springframework.security.web.server.authentication
  Performs a redirect to a specified location.
RedirectServerAuthenticationFailureHandler(String) - Constructor for class org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler
  Creates an instance
RedirectServerAuthenticationSuccessHandler - Class in org.springframework.security.web.server.authentication
  Performs a redirect on authentication success.
RedirectServerAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
  Creates a new instance with location of "/"
RedirectServerAuthenticationSuccessHandler(String) - Constructor for class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
  Creates a new instance with the specified location
RedirectServerLogoutSuccessHandler - Class in org.springframework.security.web.server.authentication.logout
  Performs a redirect on log out success.
RedirectServerLogoutSuccessHandler() - Constructor for class org.springframework.security.web.server.authentication.logout.RedirectServerLogoutSuccessHandler
RedirectStrategy - Interface in org.springframework.security.web
  Encapsulates the redirection logic for all classes in the framework which perform redirects.
RedirectUrlBuilder - Class in org.springframework.security.web.util
  Internal class for building redirect URLs.
RedirectUrlBuilder() - Constructor for class org.springframework.security.web.util.RedirectUrlBuilder
REFERRER_POLICY - Static variable in class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter
ReferrerPolicyHeaderWriter - Class in org.springframework.security.web.header.writers
  Provides support for Referrer Policy.
ReferrerPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter
  Creates a new instance.
ReferrerPolicyHeaderWriter(ReferrerPolicyHeaderWriter.ReferrerPolicy) - Constructor for class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter
  Creates a new instance.
ReferrerPolicyHeaderWriter.ReferrerPolicy - Enum Class in org.springframework.security.web.header.writers
ReferrerPolicyServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the `Referrer-Policy` response header.
ReferrerPolicyServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter
ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy - Enum Class in org.springframework.security.web.server.header
regexMatcher(String) - Static method in class org.springframework.security.web.util.matcher.RegexRequestMatcher
  Creates a case-sensitive `Pattern` instance to match against the request.
regexMatcher(HttpMethod) - Static method in class org.springframework.security.web.util.matcher.RegexRequestMatcher
  Creates an instance that matches to all requests with the same `HttpMethod`.
regexMatcher(HttpMethod, String) - Static method in class org.springframework.security.web.util.matcher.RegexRequestMatcher
  Creates a case-sensitive `Pattern` instance to match against the request.
RegExpAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
RegExpAllowFromStrategy(String) - Constructor for class org.springframework.security.web.header.writers.frameoptions.RegExpAllowFromStrategy
  Deprecated.
  Creates a new instance
RegexRequestMatcher - Class in org.springframework.security.web.util.matcher
  Uses a regular expression to decide whether a supplied the URL of a supplied `HttpServletRequest`.
RegexRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.RegexRequestMatcher
  Creates a case-sensitive `Pattern` instance to match against the request.
RegexRequestMatcher(String, String, boolean) - Constructor for class org.springframework.security.web.util.matcher.RegexRequestMatcher
  As above, but allows setting of whether case-insensitive matching should be used.
registerCredential(RelyingPartyRegistrationRequest) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
registerCredential(RelyingPartyRegistrationRequest) - Method in interface org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations
  If `RelyingPartyRegistrationRequest` is valid, will register and return a new `CredentialRecord`.
registerExtractor(Class<? extends Throwable>, ThrowableCauseExtractor) - Method in class org.springframework.security.web.util.ThrowableAnalyzer
  Registers a `ThrowableCauseExtractor` for the specified type.
RegisterSessionAuthenticationStrategy - Class in org.springframework.security.web.authentication.session
  Strategy used to register a user with the `SessionRegistry` after successful `Authentication`.
RegisterSessionAuthenticationStrategy(SessionRegistry) - Constructor for class org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy
RegisterSessionServerAuthenticationSuccessHandler - Class in org.springframework.security.web.server.authentication
  An implementation of `ServerAuthenticationSuccessHandler` that will register a `ReactiveSessionInformation` with the provided `ReactiveSessionRegistry`.
RegisterSessionServerAuthenticationSuccessHandler(ReactiveSessionRegistry) - Constructor for class org.springframework.security.web.server.authentication.RegisterSessionServerAuthenticationSuccessHandler
RelyingPartyAuthenticationRequest - Class in org.springframework.security.web.webauthn.management
  The data object used to provide the information necessary to authenticate a user with WebAuthn.
RelyingPartyAuthenticationRequest(PublicKeyCredentialRequestOptions, PublicKeyCredential<AuthenticatorAssertionResponse>) - Constructor for class org.springframework.security.web.webauthn.management.RelyingPartyAuthenticationRequest
  Creates a new instance.
RelyingPartyPublicKey - Class in org.springframework.security.web.webauthn.management
  Submitted by a client to request registration of a new credential.
RelyingPartyPublicKey(PublicKeyCredential<AuthenticatorAttestationResponse>, String) - Constructor for class org.springframework.security.web.webauthn.management.RelyingPartyPublicKey
  Creates a new instance.
RelyingPartyRegistrationRequest - Interface in org.springframework.security.web.webauthn.management
rememberMe() - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl
  Specify that URLs are allowed by users that have been remembered.
RememberMeAuthenticationException - Exception in org.springframework.security.web.authentication.rememberme
  This exception is thrown when an `Authentication` exception occurs while using the remember-me authentication.
RememberMeAuthenticationException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException
  Constructs an `RememberMeAuthenticationException` with the specified message and no root cause.
RememberMeAuthenticationException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException
  Constructs a `RememberMeAuthenticationException` with the specified message and root cause.
RememberMeAuthenticationFilter - Class in org.springframework.security.web.authentication.rememberme
  Detects if there is no `Authentication` object in the `SecurityContext`, and populates the context with a remember-me authentication token if a `RememberMeServices` implementation so requests.
RememberMeAuthenticationFilter(AuthenticationManager, RememberMeServices) - Constructor for class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
rememberMeRequested(HttpServletRequest, String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Allows customization of whether a remember-me login has been requested.
RememberMeServices - Interface in org.springframework.security.web.authentication
  Implement by a class that is capable of providing a remember-me service.
removeMatchingRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
removeMatchingRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.NoOpServerRequestCache
removeMatchingRequest(ServerWebExchange) - Method in interface org.springframework.security.web.server.savedrequest.ServerRequestCache
  If the provided `ServerWebExchange` matches the saved `ServerHttpRequest` gets the saved `ServerHttpRequest`
removeMatchingRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
removeRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
removeRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
removeRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache
removeRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache
  Removes the cached request.
removeUserTokens(String) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl
removeUserTokens(String) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
removeUserTokens(String) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository
request - Variable in class org.springframework.security.web.access.expression.WebSecurityExpressionRoot
  Allows direct access to the request object
RequestAttributeAuthenticationFilter - Class in org.springframework.security.web.authentication.preauth
  A simple pre-authenticated filter which obtains the username from request attributes, for use with SSO systems such as Stanford WebAuth or Shibboleth.
RequestAttributeAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
RequestAttributeSecurityContextRepository - Class in org.springframework.security.web.context
  Stores the `SecurityContext` on a `ServletRequest.setAttribute(String, Object)` so that it can be restored when different dispatch types occur.
RequestAttributeSecurityContextRepository() - Constructor for class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
  Creates a new instance using `RequestAttributeSecurityContextRepository.DEFAULT_REQUEST_ATTR_NAME`.
RequestAttributeSecurityContextRepository(String) - Constructor for class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
  Creates a new instance with the specified request attribute name.
RequestAuthorizationContext - Class in org.springframework.security.web.access.intercept
  An `HttpServletRequest` authorization context.
RequestAuthorizationContext(HttpServletRequest) - Constructor for class org.springframework.security.web.access.intercept.RequestAuthorizationContext
  Creates an instance.
RequestAuthorizationContext(HttpServletRequest, Map<String, String>) - Constructor for class org.springframework.security.web.access.intercept.RequestAuthorizationContext
  Creates an instance.
RequestCache - Interface in org.springframework.security.web.savedrequest
  Implements "saved request" logic, allowing a single request to be retrieved and restarted after redirecting to an authentication mechanism.
RequestCacheAwareFilter - Class in org.springframework.security.web.savedrequest
  Responsible for reconstituting the saved request if one is cached and it matches the current request.
RequestCacheAwareFilter() - Constructor for class org.springframework.security.web.savedrequest.RequestCacheAwareFilter
RequestCacheAwareFilter(RequestCache) - Constructor for class org.springframework.security.web.savedrequest.RequestCacheAwareFilter
RequestedUrlRedirectInvalidSessionStrategy - Class in org.springframework.security.web.session
  Performs a redirect to the original request URL when an invalid requested session is detected by the `SessionManagementFilter`.
RequestedUrlRedirectInvalidSessionStrategy() - Constructor for class org.springframework.security.web.session.RequestedUrlRedirectInvalidSessionStrategy
RequestHeaderAuthenticationFilter - Class in org.springframework.security.web.authentication.preauth
  A simple pre-authenticated filter which obtains the username from a request header, for use with systems such as CA Siteminder.
RequestHeaderAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
RequestHeaderRequestMatcher - Class in org.springframework.security.web.util.matcher
  A `RequestMatcher` that can be used to match request that contain a header with an expected header name and an expected value.
RequestHeaderRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher
  Creates a new instance that will match if a header by the name of `RequestHeaderRequestMatcher.expectedHeaderName` is present.
RequestHeaderRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher
  Creates a new instance that will match if a header by the name of `RequestHeaderRequestMatcher.expectedHeaderName` is present and if the `RequestHeaderRequestMatcher.expectedHeaderValue` is non-null the first value is the same.
RequestKey - Class in org.springframework.security.web.access.intercept
RequestKey(String) - Constructor for class org.springframework.security.web.access.intercept.RequestKey
RequestKey(String, String) - Constructor for class org.springframework.security.web.access.intercept.RequestKey
RequestMatcher - Interface in org.springframework.security.web.util.matcher
  Simple strategy to match an `HttpServletRequest`.
RequestMatcher.MatchResult - Class in org.springframework.security.web.util.matcher
  The result of matching against an HttpServletRequest Contains the status, true or false, of the match and if present, any variables extracted from the match
RequestMatcherDelegatingAccessDeniedHandler - Class in org.springframework.security.web.access
  An `AccessDeniedHandler` that delegates to other `AccessDeniedHandler` instances based upon the type of `HttpServletRequest` passed into `RequestMatcherDelegatingAccessDeniedHandler.handle(HttpServletRequest, HttpServletResponse, AccessDeniedException)`.
RequestMatcherDelegatingAccessDeniedHandler(LinkedHashMap<RequestMatcher, AccessDeniedHandler>, AccessDeniedHandler) - Constructor for class org.springframework.security.web.access.RequestMatcherDelegatingAccessDeniedHandler
  Creates a new instance
RequestMatcherDelegatingAuthenticationManagerResolver - Class in org.springframework.security.web.authentication
  An `AuthenticationManagerResolver` that returns a `AuthenticationManager` instances based upon the type of `HttpServletRequest` passed into `RequestMatcherDelegatingAuthenticationManagerResolver.resolve(HttpServletRequest)`.
RequestMatcherDelegatingAuthenticationManagerResolver.Builder - Class in org.springframework.security.web.authentication
  A builder for `RequestMatcherDelegatingAuthenticationManagerResolver`.
RequestMatcherDelegatingAuthorizationManager - Class in org.springframework.security.web.access.intercept
  An `AuthorizationManager` which delegates to a specific `AuthorizationManager` based on a `RequestMatcher` evaluation.
RequestMatcherDelegatingAuthorizationManager.Builder - Class in org.springframework.security.web.access.intercept
  A builder for `RequestMatcherDelegatingAuthorizationManager`.
RequestMatcherDelegatingAuthorizationManager.Builder.AuthorizedUrl - Class in org.springframework.security.web.access.intercept
  An object that allows configuring the `AuthorizationManager` for `RequestMatcher`s.
RequestMatcherDelegatingWebInvocationPrivilegeEvaluator - Class in org.springframework.security.web.access
  A `WebInvocationPrivilegeEvaluator` which delegates to a list of `WebInvocationPrivilegeEvaluator` based on a `RequestMatcher` evaluation
RequestMatcherDelegatingWebInvocationPrivilegeEvaluator(List<RequestMatcherEntry<List<WebInvocationPrivilegeEvaluator>>>) - Constructor for class org.springframework.security.web.access.RequestMatcherDelegatingWebInvocationPrivilegeEvaluator
RequestMatcherEditor - Class in org.springframework.security.web.util.matcher
  PropertyEditor which creates ELRequestMatcher instances from Strings This allows to use a String in a BeanDefinition instead of an (inner) bean if a RequestMatcher is required, e.g.
RequestMatcherEditor() - Constructor for class org.springframework.security.web.util.matcher.RequestMatcherEditor
RequestMatcherEntry<T> - Class in org.springframework.security.web.util.matcher
  A rich object for associating a `RequestMatcher` to another object.
RequestMatcherEntry(RequestMatcher, T) - Constructor for class org.springframework.security.web.util.matcher.RequestMatcherEntry
RequestMatcherRedirectFilter - Class in org.springframework.security.web
  Filter that redirects requests that match `RequestMatcher` to the specified URL.
RequestMatcherRedirectFilter(RequestMatcher, String) - Constructor for class org.springframework.security.web.RequestMatcherRedirectFilter
  Create and initialize an instance of the filter.
requestMatchers(RequestMatcher...) - Method in class org.springframework.security.web.access.intercept.RequestMatcherDelegatingAuthorizationManager.Builder
  Maps `RequestMatcher`s to `AuthorizationManager`.
RequestMatchers - Class in org.springframework.security.web.util.matcher
  A factory class to create `RequestMatcher` instances.
RequestRejectedException - Exception in org.springframework.security.web.firewall
RequestRejectedException(String) - Constructor for exception org.springframework.security.web.firewall.RequestRejectedException
RequestRejectedHandler - Interface in org.springframework.security.web.firewall
  Used by `FilterChainProxy` to handle an `RequestRejectedException`.
RequestVariablesExtractor - Interface in org.springframework.security.web.util.matcher
  Deprecated.
  use `RequestMatcher.MatchResult` from `RequestMatcher.matcher(HttpServletRequest)`
REQUIRE_CORP - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
REQUIRE_CORP - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
REQUIRED - Static variable in class org.springframework.security.web.webauthn.api.ResidentKeyRequirement
  The required value indicates that the Relying Party requires a client-side discoverable credential.
REQUIRED - Static variable in class org.springframework.security.web.webauthn.api.UserVerificationRequirement
  The required value indicates that the Relying Party requires user verification for the operation and will fail the overall ceremony if the response does not have the UV flag set.
requiresAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Indicates whether this filter should attempt to process a login request for the current invocation.
requiresExitUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Checks the request URI for the presence of `exitUserUrl`.
requiresLogout(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter
  Allow subclasses to modify when a logout should take place.
requiresSwitchUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Checks the request URI for the presence of `switchUserUrl`.
reset() - Method in class org.springframework.security.web.firewall.FirewalledRequest
  This method will be called once the request has passed through the security filter chain, when it is about to proceed to the application proper.
residentKey(ResidentKeyRequirement) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder
  Sets the `AuthenticatorSelectionCriteria.getResidentKey()` property.
ResidentKeyRequirement - Class in org.springframework.security.web.webauthn.api
  The ResidentKeyRequirement describes the Relying Partys requirements for client-side discoverable credentials.
resolve(HttpServletRequest) - Method in class org.springframework.security.web.authentication.RequestMatcherDelegatingAuthenticationManagerResolver
resolve(ServerWebExchange) - Method in class org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver
resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver
  Deprecated.
resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver
resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
resolveArgument(MethodParameter, BindingContext, ServerWebExchange) - Method in class org.springframework.security.web.reactive.result.method.annotation.AuthenticationPrincipalArgumentResolver
resolveArgument(MethodParameter, BindingContext, ServerWebExchange) - Method in class org.springframework.security.web.reactive.result.method.annotation.CurrentSecurityContextArgumentResolver
resolveCsrfTokenValue(HttpServletRequest, CsrfToken) - Method in interface org.springframework.security.web.csrf.CsrfTokenRequestHandler
resolveCsrfTokenValue(HttpServletRequest, CsrfToken) - Method in interface org.springframework.security.web.csrf.CsrfTokenRequestResolver
  Returns the token value resolved from the provided `HttpServletRequest` and `CsrfToken` or `null` if not available.
resolveCsrfTokenValue(HttpServletRequest, CsrfToken) - Method in class org.springframework.security.web.csrf.XorCsrfTokenRequestAttributeHandler
resolveCsrfTokenValue(ServerWebExchange, CsrfToken) - Method in class org.springframework.security.web.server.csrf.ServerCsrfTokenRequestAttributeHandler
resolveCsrfTokenValue(ServerWebExchange, CsrfToken) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRequestHandler
resolveCsrfTokenValue(ServerWebExchange, CsrfToken) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRequestResolver
  Returns the token value resolved from the provided `ServerWebExchange` and `CsrfToken` or `Mono.empty()` if not available.
resolveCsrfTokenValue(ServerWebExchange, CsrfToken) - Method in class org.springframework.security.web.server.csrf.XorServerCsrfTokenRequestAttributeHandler
RESOURCE_POLICY - Static variable in class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter
response(R) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getResponse()` property.
retrievePassword(Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
retrieveUserName(Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
RetryWithHttpEntryPoint - Class in org.springframework.security.web.access.channel
  Commences an insecure channel by retrying the original request using HTTP.
RetryWithHttpEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint
RetryWithHttpsEntryPoint - Class in org.springframework.security.web.access.channel
  Commences a secure channel by retrying the original request using HTTPS.
RetryWithHttpsEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint
ROLE_PREVIOUS_ADMINISTRATOR - Static variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
ROLE_PREVIOUS_ADMINISTRATOR - Static variable in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
rp(PublicKeyCredentialRpEntity) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getRp()` property.
rpId(String) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getRpId()` property.
RS1 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
RS1 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
RS256 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
RS256 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
RS384 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
RS384 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters
RS512 - Static variable in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
RS512 - Static variable in class org.springframework.security.web.webauthn.api.PublicKeyCredentialParameters

## S

SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
SAME_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
SAME_ORIGIN_ALLOW_POPUPS - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
SAME_ORIGIN_ALLOW_POPUPS - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
SAME_SITE - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
SAME_SITE - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
SAMEORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode
SAMEORIGIN - Enum constant in enum class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode
  A browser receiving content with this header field MUST NOT display this content in any frame from a page of different origin than the content itself.
save(HttpServletRequest, HttpServletResponse, PublicKeyCredentialCreationOptions) - Method in class org.springframework.security.web.webauthn.registration.HttpSessionPublicKeyCredentialCreationOptionsRepository
save(HttpServletRequest, HttpServletResponse, PublicKeyCredentialCreationOptions) - Method in interface org.springframework.security.web.webauthn.registration.PublicKeyCredentialCreationOptionsRepository
  Saves the provided `PublicKeyCredentialCreationOptions` or clears an existing `PublicKeyCredentialCreationOptions` if `options` is null.
save(HttpServletRequest, HttpServletResponse, PublicKeyCredentialRequestOptions) - Method in class org.springframework.security.web.webauthn.authentication.HttpSessionPublicKeyCredentialRequestOptionsRepository
save(HttpServletRequest, HttpServletResponse, PublicKeyCredentialRequestOptions) - Method in interface org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsRepository
  Saves the provided `PublicKeyCredentialRequestOptions` or clears an existing `PublicKeyCredentialRequestOptions` if `options` is null.
save(CredentialRecord) - Method in class org.springframework.security.web.webauthn.management.MapUserCredentialRepository
save(CredentialRecord) - Method in interface org.springframework.security.web.webauthn.management.UserCredentialRepository
  Saves a `CredentialRecord`
save(PublicKeyCredentialUserEntity) - Method in class org.springframework.security.web.webauthn.management.MapPublicKeyCredentialUserEntityRepository
save(PublicKeyCredentialUserEntity) - Method in interface org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository
  Saves the `PublicKeyCredentialUserEntity` to the associated username.
save(ServerWebExchange, SecurityContext) - Method in class org.springframework.security.web.server.context.NoOpServerSecurityContextRepository
save(ServerWebExchange, SecurityContext) - Method in interface org.springframework.security.web.server.context.ServerSecurityContextRepository
  Saves the SecurityContext
save(ServerWebExchange, SecurityContext) - Method in class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
saveContext(SecurityContext) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
  Implements the logic for storing the security context.
saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.DelegatingSecurityContextRepository
saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.NullSecurityContextRepository
saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.context.SecurityContextRepository
  Stores the security context on completion of a request.
SaveContextOnUpdateOrErrorResponseWrapper - Class in org.springframework.security.web.context
  Deprecated.
  Use `SecurityContextRepository.loadDeferredContext(HttpServletRequest)` instead.
SaveContextOnUpdateOrErrorResponseWrapper(HttpServletResponse, boolean) - Constructor for class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
SavedCookie - Class in org.springframework.security.web.savedrequest
  Stores off the values of a cookie in a serializable holder
SavedCookie(Cookie) - Constructor for class org.springframework.security.web.savedrequest.SavedCookie
SavedCookie(String, String, String, int, String, boolean) - Constructor for class org.springframework.security.web.savedrequest.SavedCookie
SavedCookie(String, String, String, String, int, String, boolean, int) - Constructor for class org.springframework.security.web.savedrequest.SavedCookie
  Deprecated, for removal: This API element is subject to removal in a future version.
  use `SavedCookie(String, String, String, int, String, boolean)` instead
SavedRequest - Interface in org.springframework.security.web.savedrequest
  Encapsulates the functionality required of a cached request for both an authentication mechanism (typically form-based login) to redirect to the original URL and for a `RequestCache` to build a wrapped request, reproducing the original request data.
SavedRequestAwareAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication
  An authentication success strategy which can make use of the `DefaultSavedRequest` which may have been stored in the session by the `ExceptionTranslationFilter`.
SavedRequestAwareAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler
saveException(HttpServletRequest, AuthenticationException) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
  Caches the `AuthenticationException` for use in view rendering.
saveRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
saveRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
  Stores the current request, provided the configuration properties allow it.
saveRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache
saveRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache
  Caches the current request for later retrieval, once authentication has taken place.
saveRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
saveRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.NoOpServerRequestCache
saveRequest(ServerWebExchange) - Method in interface org.springframework.security.web.server.savedrequest.ServerRequestCache
  Save the `ServerHttpRequest`
saveRequest(ServerWebExchange) - Method in class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository
  Saves the `CsrfToken` using the `HttpServletRequest` and `HttpServletResponse`.
saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository
  Deprecated.
  Does nothing if the `CsrfToken` is not null.
saveToken(ServerWebExchange, CsrfToken) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
saveToken(ServerWebExchange, CsrfToken) - Method in interface org.springframework.security.web.server.csrf.ServerCsrfTokenRepository
  Saves the `CsrfToken` using the `ServerWebExchange`.
saveToken(ServerWebExchange, CsrfToken) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
SecureChannelProcessor - Class in org.springframework.security.web.access.channel
  Ensures channel security is active by review of `HttpServletRequest.isSecure()` responses.
SecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.SecureChannelProcessor
SecurityContextCallableProcessingInterceptor - Class in org.springframework.security.web.context.request.async
  Allows for integration with Spring MVC's `Callable` support.
SecurityContextCallableProcessingInterceptor() - Constructor for class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
  Create a new `SecurityContextCallableProcessingInterceptor` that uses the `SecurityContext` from the `SecurityContextHolder` at the time `SecurityContextCallableProcessingInterceptor.beforeConcurrentHandling(NativeWebRequest, Callable)` is invoked.
SecurityContextCallableProcessingInterceptor(SecurityContext) - Constructor for class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
  Creates a new `SecurityContextCallableProcessingInterceptor` with the specified `SecurityContext`.
SecurityContextHolderAwareRequestFilter - Class in org.springframework.security.web.servletapi
  A `Filter` which populates the `ServletRequest` with a request wrapper which implements the servlet API security methods.
SecurityContextHolderAwareRequestFilter() - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
SecurityContextHolderAwareRequestWrapper - Class in org.springframework.security.web.servletapi
  A Spring Security-aware `HttpServletRequestWrapper`, which uses the `SecurityContext`-defined `Authentication` object to implement the servlet API security methods: `SecurityContextHolderAwareRequestWrapper.getUserPrincipal()` `SecurityContextHolderAwareRequestWrapper.isUserInRole(String)` `HttpServletRequestWrapper.getRemoteUser()`.
SecurityContextHolderAwareRequestWrapper(HttpServletRequest, String) - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Creates a new instance with `AuthenticationTrustResolverImpl`.
SecurityContextHolderAwareRequestWrapper(HttpServletRequest, AuthenticationTrustResolver, String) - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Creates a new instance
SecurityContextHolderFilter - Class in org.springframework.security.web.context
  A `Filter` that uses the `SecurityContextRepository` to obtain the `SecurityContext` and set it on the `SecurityContextHolder`.
SecurityContextHolderFilter(SecurityContextRepository) - Constructor for class org.springframework.security.web.context.SecurityContextHolderFilter
  Creates a new instance.
SecurityContextLogoutHandler - Class in org.springframework.security.web.authentication.logout
  Performs a logout by modifying the `SecurityContextHolder`.
SecurityContextLogoutHandler() - Constructor for class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
SecurityContextPersistenceFilter - Class in org.springframework.security.web.context
  Deprecated.
  Use `SecurityContextHolderFilter`
SecurityContextPersistenceFilter() - Constructor for class org.springframework.security.web.context.SecurityContextPersistenceFilter
  Deprecated.
SecurityContextPersistenceFilter(SecurityContextRepository) - Constructor for class org.springframework.security.web.context.SecurityContextPersistenceFilter
  Deprecated.
SecurityContextRepository - Interface in org.springframework.security.web.context
  Strategy used for persisting a `SecurityContext` between requests.
SecurityContextServerLogoutHandler - Class in org.springframework.security.web.server.authentication.logout
  A `ServerLogoutHandler` which removes the SecurityContext using the provided `ServerSecurityContextRepository`
SecurityContextServerLogoutHandler() - Constructor for class org.springframework.security.web.server.authentication.logout.SecurityContextServerLogoutHandler
SecurityContextServerWebExchange - Class in org.springframework.security.web.server.context
  Overrides the `ServerWebExchange.getPrincipal()` with the provided SecurityContext
SecurityContextServerWebExchange(ServerWebExchange, Mono<SecurityContext>) - Constructor for class org.springframework.security.web.server.context.SecurityContextServerWebExchange
SecurityContextServerWebExchangeWebFilter - Class in org.springframework.security.web.server.context
  Override the `ServerWebExchange.getPrincipal()` to be looked up using `ReactiveSecurityContextHolder`.
SecurityContextServerWebExchangeWebFilter() - Constructor for class org.springframework.security.web.server.context.SecurityContextServerWebExchangeWebFilter
SecurityFilterChain - Interface in org.springframework.security.web
  Defines a filter chain which is capable of being matched against an `HttpServletRequest`.
SecurityHeaders - Class in org.springframework.security.web.http
  Utilities for interacting with `HttpHeaders`
SecurityWebApplicationContextUtils - Class in org.springframework.security.web.context.support
  Spring Security extension to Spring's `WebApplicationContextUtils`.
SecurityWebApplicationContextUtils() - Constructor for class org.springframework.security.web.context.support.SecurityWebApplicationContextUtils
SecurityWebFilterChain - Interface in org.springframework.security.web.server
  Defines a filter chain which is capable of being matched against a `ServerWebExchange` in order to decide whether it applies to that request.
sendError(int) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the superclass `sendError()`
sendError(int, String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the superclass `sendError()`
sendRedirect(HttpServletRequest, HttpServletResponse, String) - Method in class org.springframework.security.web.DefaultRedirectStrategy
  Redirects the response to the supplied URL.
sendRedirect(HttpServletRequest, HttpServletResponse, String) - Method in interface org.springframework.security.web.RedirectStrategy
  Performs a redirect to the supplied URL
sendRedirect(String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
  Makes sure `OnCommittedResponseWrapper.onResponseCommitted()` is invoked before calling the superclass `sendRedirect()`
sendRedirect(ServerWebExchange, URI) - Method in class org.springframework.security.web.server.DefaultServerRedirectStrategy
sendRedirect(ServerWebExchange, URI) - Method in interface org.springframework.security.web.server.ServerRedirectStrategy
  Performs a redirect based upon the provided `ServerWebExchange` and `URI`
sendStartAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, AuthenticationException) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
ServerAccessDeniedHandler - Interface in org.springframework.security.web.server.authorization
ServerAuthenticationConverter - Interface in org.springframework.security.web.server.authentication
  A strategy used for converting from a `ServerWebExchange` to an `Authentication` used for authenticating with a provided `ReactiveAuthenticationManager`.
ServerAuthenticationEntryPoint - Interface in org.springframework.security.web.server
  Used to request authentication
ServerAuthenticationEntryPointFailureHandler - Class in org.springframework.security.web.server.authentication
  Adapts a `ServerAuthenticationEntryPoint` into a `ServerAuthenticationFailureHandler`
ServerAuthenticationEntryPointFailureHandler(ServerAuthenticationEntryPoint) - Constructor for class org.springframework.security.web.server.authentication.ServerAuthenticationEntryPointFailureHandler
ServerAuthenticationFailureHandler - Interface in org.springframework.security.web.server.authentication
  Handles authentication failure
ServerAuthenticationSuccessHandler - Interface in org.springframework.security.web.server.authentication
  Handles authentication success
ServerCsrfTokenRepository - Interface in org.springframework.security.web.server.csrf
  An API to allow changing the method in which the expected `CsrfToken` is associated to the `ServerWebExchange`.
ServerCsrfTokenRequestAttributeHandler - Class in org.springframework.security.web.server.csrf
  An implementation of the `ServerCsrfTokenRequestHandler` interface that is capable of making the `CsrfToken` available as an exchange attribute and resolving the token value as either a form data value or header of the request.
ServerCsrfTokenRequestAttributeHandler() - Constructor for class org.springframework.security.web.server.csrf.ServerCsrfTokenRequestAttributeHandler
ServerCsrfTokenRequestHandler - Interface in org.springframework.security.web.server.csrf
  A callback interface that is used to make the `CsrfToken` created by the `ServerCsrfTokenRepository` available as an exchange attribute.
ServerCsrfTokenRequestResolver - Interface in org.springframework.security.web.server.csrf
  Implementations of this interface are capable of resolving the token value of a `CsrfToken` from the provided `ServerWebExchange`.
ServerExchangeRejectedException - Exception in org.springframework.security.web.server.firewall
  Thrown when a `ServerWebExchange` is rejected.
ServerExchangeRejectedException(String) - Constructor for exception org.springframework.security.web.server.firewall.ServerExchangeRejectedException
ServerExchangeRejectedHandler - Interface in org.springframework.security.web.server.firewall
  Handles `ServerExchangeRejectedException` thrown by `ServerWebExchangeFirewall`.
ServerFormLoginAuthenticationConverter - Class in org.springframework.security.web.server.authentication
  Converts a ServerWebExchange into a UsernamePasswordAuthenticationToken from the form data HTTP parameters.
ServerFormLoginAuthenticationConverter - Class in org.springframework.security.web.server
  Deprecated.
  use `ServerFormLoginAuthenticationConverter` instead.
ServerFormLoginAuthenticationConverter() - Constructor for class org.springframework.security.web.server.authentication.ServerFormLoginAuthenticationConverter
ServerFormLoginAuthenticationConverter() - Constructor for class org.springframework.security.web.server.ServerFormLoginAuthenticationConverter
  Deprecated.
ServerHttpBasicAuthenticationConverter - Class in org.springframework.security.web.server.authentication
  Converts from a `ServerWebExchange` to an `Authentication` that can be authenticated.
ServerHttpBasicAuthenticationConverter - Class in org.springframework.security.web.server
  Deprecated.
  Use `ServerHttpBasicAuthenticationConverter` instead.
ServerHttpBasicAuthenticationConverter() - Constructor for class org.springframework.security.web.server.authentication.ServerHttpBasicAuthenticationConverter
ServerHttpBasicAuthenticationConverter() - Constructor for class org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter
  Deprecated.
ServerHttpHeadersWriter - Interface in org.springframework.security.web.server.header
  Interface for writing headers just before the response is committed.
ServerLogoutHandler - Interface in org.springframework.security.web.server.authentication.logout
  Handles log out
ServerLogoutSuccessHandler - Interface in org.springframework.security.web.server.authentication.logout
  Strategy for when log out was successfully performed (typically after `ServerLogoutHandler` is invoked).
ServerMaximumSessionsExceededHandler - Interface in org.springframework.security.web.server.authentication
  Strategy for handling the scenario when the maximum number of sessions for a user has been reached.
ServerOneTimeTokenAuthenticationConverter - Class in org.springframework.security.web.server.authentication.ott
  An implementation of `ServerAuthenticationConverter` for resolving `OneTimeTokenAuthenticationToken` from token parameter.
ServerOneTimeTokenAuthenticationConverter() - Constructor for class org.springframework.security.web.server.authentication.ott.ServerOneTimeTokenAuthenticationConverter
ServerOneTimeTokenGenerationSuccessHandler - Interface in org.springframework.security.web.server.authentication.ott
  Defines a reactive strategy to handle generated one-time tokens.
ServerRedirectOneTimeTokenGenerationSuccessHandler - Class in org.springframework.security.web.server.authentication.ott
  A `ServerOneTimeTokenGenerationSuccessHandler` that performs a redirect to a specific location
ServerRedirectOneTimeTokenGenerationSuccessHandler(String) - Constructor for class org.springframework.security.web.server.authentication.ott.ServerRedirectOneTimeTokenGenerationSuccessHandler
ServerRedirectStrategy - Interface in org.springframework.security.web.server
  A strategy for performing redirects.
ServerRequestCache - Interface in org.springframework.security.web.server.savedrequest
  Saves a `ServerHttpRequest` so it can be "replayed" later.
ServerRequestCacheWebFilter - Class in org.springframework.security.web.server.savedrequest
  A `WebFilter` that replays any matching request in `ServerRequestCache`
ServerRequestCacheWebFilter() - Constructor for class org.springframework.security.web.server.savedrequest.ServerRequestCacheWebFilter
ServerSecurityContextRepository - Interface in org.springframework.security.web.server.context
  Strategy used for persisting a `SecurityContext` between requests.
ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver - Class in org.springframework.security.web.server.authentication
  A `ReactiveAuthenticationManagerResolver` that returns a `ReactiveAuthenticationManager` instances based upon the type of `ServerWebExchange` passed into `ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.resolve(ServerWebExchange)`.
ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.Builder - Class in org.springframework.security.web.server.authentication
  A builder for `ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver`.
ServerWebExchangeDelegatingServerAccessDeniedHandler - Class in org.springframework.security.web.server.authorization
  A `ServerAccessDeniedHandler` which delegates to multiple `ServerAccessDeniedHandler`s based on a `ServerWebExchangeMatcher`
ServerWebExchangeDelegatingServerAccessDeniedHandler(List<ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry>) - Constructor for class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler
  Creates a new instance
ServerWebExchangeDelegatingServerAccessDeniedHandler(ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry...) - Constructor for class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler
  Creates a new instance
ServerWebExchangeDelegatingServerAccessDeniedHandler.DelegateEntry - Class in org.springframework.security.web.server.authorization
ServerWebExchangeDelegatingServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Delegates to a provided `ServerHttpHeadersWriter` if `ServerWebExchangeMatcher.matches(ServerWebExchange)` returns a match.
ServerWebExchangeDelegatingServerHttpHeadersWriter(ServerWebExchangeMatcherEntry<ServerHttpHeadersWriter>) - Constructor for class org.springframework.security.web.server.header.ServerWebExchangeDelegatingServerHttpHeadersWriter
  Creates a new instance
ServerWebExchangeDelegatingServerHttpHeadersWriter(ServerWebExchangeMatcher, ServerHttpHeadersWriter) - Constructor for class org.springframework.security.web.server.header.ServerWebExchangeDelegatingServerHttpHeadersWriter
  Creates a new instance
ServerWebExchangeFirewall - Interface in org.springframework.security.web.server.firewall
  Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.
ServerWebExchangeMatcher - Interface in org.springframework.security.web.server.util.matcher
  An interface for determining if a `ServerWebExchangeMatcher` matches.
ServerWebExchangeMatcher.MatchResult - Class in org.springframework.security.web.server.util.matcher
  The result of matching
ServerWebExchangeMatcherEntry<T> - Class in org.springframework.security.web.server.util.matcher
  A rich object for associating a `ServerWebExchangeMatcher` to another object.
ServerWebExchangeMatcherEntry(ServerWebExchangeMatcher, T) - Constructor for class org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcherEntry
ServerWebExchangeMatchers - Class in org.springframework.security.web.server.util.matcher
  Provides factory methods for creating common `ServerWebExchangeMatcher`
ServerX509AuthenticationConverter - Class in org.springframework.security.web.server.authentication
  Converts from a `SslInfo` provided by a request to an `PreAuthenticatedAuthenticationToken` that can be authenticated.
ServerX509AuthenticationConverter(X509PrincipalExtractor) - Constructor for class org.springframework.security.web.server.authentication.ServerX509AuthenticationConverter
servletPath(String) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher.Builder
  Sets the servlet path to be used by the `MvcRequestMatcher` generated by this builder
SessionAuthenticationException - Exception in org.springframework.security.web.authentication.session
  Thrown by an `SessionAuthenticationStrategy` or `ServerSessionAuthenticationStrategy` to indicate that an authentication object is not valid for the current session, typically because the same user has exceeded the number of sessions they are allowed to have concurrently.
SessionAuthenticationException(String) - Constructor for exception org.springframework.security.web.authentication.session.SessionAuthenticationException
SessionAuthenticationStrategy - Interface in org.springframework.security.web.authentication.session
  Allows pluggable support for HttpSession-related behaviour when an authentication occurs.
sessionCreated(HttpSessionEvent) - Method in class org.springframework.security.web.session.HttpSessionEventPublisher
  Handles the HttpSessionEvent by publishing a `HttpSessionCreatedEvent` to the application appContext.
sessionDestroyed(HttpSessionEvent) - Method in class org.springframework.security.web.session.HttpSessionEventPublisher
  Handles the HttpSessionEvent by publishing a `HttpSessionDestroyedEvent` to the application appContext.
SessionFixationProtectionEvent - Class in org.springframework.security.web.authentication.session
  Indicates a session ID was changed for the purposes of session fixation protection.
SessionFixationProtectionEvent(Authentication, String, String) - Constructor for class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent
  Constructs a new session fixation protection event.
SessionFixationProtectionStrategy - Class in org.springframework.security.web.authentication.session
  Uses `HttpServletRequest.invalidate()` to protect against session fixation attacks.
SessionFixationProtectionStrategy() - Constructor for class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy
sessionIdChanged(HttpSessionEvent, String) - Method in class org.springframework.security.web.session.HttpSessionEventPublisher
SessionInformationExpiredEvent - Class in org.springframework.security.web.session
  An event for when a `SessionInformation` is expired.
SessionInformationExpiredEvent(SessionInformation, HttpServletRequest, HttpServletResponse) - Constructor for class org.springframework.security.web.session.SessionInformationExpiredEvent
  Creates a new instance
SessionInformationExpiredEvent(SessionInformation, HttpServletRequest, HttpServletResponse, FilterChain) - Constructor for class org.springframework.security.web.session.SessionInformationExpiredEvent
  Creates a new instance
SessionInformationExpiredStrategy - Interface in org.springframework.security.web.session
  Determines the behaviour of the `ConcurrentSessionFilter` when an expired session is detected in the `ConcurrentSessionFilter`.
SessionLimit - Interface in org.springframework.security.web.server.authentication
  Represents the maximum number of sessions allowed.
SessionManagementFilter - Class in org.springframework.security.web.session
  Detects that a user has been authenticated since the start of the request and, if they have, calls the configured `SessionAuthenticationStrategy` to perform any session-related activity such as activating session-fixation protection mechanisms or checking for multiple concurrent logins.
SessionManagementFilter(SecurityContextRepository) - Constructor for class org.springframework.security.web.session.SessionManagementFilter
SessionManagementFilter(SecurityContextRepository, SessionAuthenticationStrategy) - Constructor for class org.springframework.security.web.session.SessionManagementFilter
setAccessDeniedHandler(AccessDeniedHandler) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
setAccessDeniedHandler(AccessDeniedHandler) - Method in class org.springframework.security.web.csrf.CsrfFilter
  Specifies a `AccessDeniedHandler` that should be used when CSRF protection fails.
setAccessDeniedHandler(ServerAccessDeniedHandler) - Method in class org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter
  Sets the access denied handler.
setAccessDeniedHandler(ServerAccessDeniedHandler) - Method in class org.springframework.security.web.server.csrf.CsrfWebFilter
setAllowBackSlash(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a backslash "\" or a URL encoded backslash "%5C" should be allowed in the path or not.
setAllowBackSlash(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a backslash "\" or a URL encoded backslash "%5C" should be allowed in the path or not.
setAllowedHeaderNames(Predicate<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which header names should be allowed.
setAllowedHeaderNames(Predicate<String>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which header names should be allowed.
setAllowedHeaderValues(Predicate<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which header values should be allowed.
setAllowedHeaderValues(Predicate<String>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which header values should be allowed.
setAllowedHostnames(Predicate<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which hostnames should be allowed.
setAllowedHostnames(Predicate<String>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which hostnames should be allowed.
setAllowedHttpMethods(Collection<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which HTTP methods should be allowed.
setAllowedHttpMethods(Collection<HttpMethod>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which HTTP methods should be allowed.
setAllowedParameterNames(Predicate<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which parameter names should be allowed.
setAllowedParameterNames(Predicate<String>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which parameter names should be allowed.
setAllowedParameterValues(Predicate<String>) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines which parameter values should be allowed.
setAllowedParameterValues(Predicate<String>) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines which parameter values should be allowed.
setAllowFromParameterName(String) - Method in class org.springframework.security.web.header.writers.frameoptions.AbstractRequestParameterAllowFromStrategy
  Deprecated.
  Sets the HTTP parameter used to retrieve the value for the origin that is allowed from.
setAllowNull(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a null "\0" or a URL encoded nul "%00" should be allowed in the path or not.
setAllowNull(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a null "\0" or a URL encoded nul "%00" should be allowed in the path or not.
setAllowSemicolon(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if semicolon is allowed in the URL (i.e.
setAllowSemicolon(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if semicolon is allowed in the URL (i.e.
setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  If set to true (the default), a session will be created (if required) to store the security context if it is determined that its contents are different from the default empty context value.
setAllowUrlEncodedCarriageReturn(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a URL encoded Carriage Return is allowed in the path or not.
setAllowUrlEncodedCarriageReturn(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a URL encoded Carriage Return is allowed in the path or not.
setAllowUrlEncodedDoubleSlash(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if double slash "//" that is URL encoded "%2F%2F" should be allowed in the path or not.
setAllowUrlEncodedDoubleSlash(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if double slash "//" that is URL encoded "%2F%2F" should be allowed in the path or not.
setAllowUrlEncodedLineFeed(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a URL encoded Line Feed is allowed in the path or not.
setAllowUrlEncodedLineFeed(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a URL encoded Line Feed is allowed in the path or not.
setAllowUrlEncodedLineSeparator(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a URL encoded line separator is allowed in the path or not.
setAllowUrlEncodedLineSeparator(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a URL encoded line separator is allowed in the path or not.
setAllowUrlEncodedParagraphSeparator(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a URL encoded paragraph separator is allowed in the path or not.
setAllowUrlEncodedParagraphSeparator(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a URL encoded paragraph separator is allowed in the path or not.
setAllowUrlEncodedPercent(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a percent "%" that is URL encoded "%25" should be allowed in the path or not.
setAllowUrlEncodedPercent(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a percent "%" that is URL encoded "%25" should be allowed in the path or not.
setAllowUrlEncodedPeriod(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a period "." that is URL encoded "%2E" should be allowed in the path or not.
setAllowUrlEncodedPeriod(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a period "." that is URL encoded "%2E" should be allowed in the path or not.
setAllowUrlEncodedSlash(boolean) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall
  Sets if the application should allow a URL encoded slash character.
setAllowUrlEncodedSlash(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Determines if a slash "/" that is URL encoded "%2F" should be allowed in the path or not.
setAllowUrlEncodedSlash(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Determines if a slash "/" that is URL encoded "%2F" should be allowed in the path or not.
setAlwaysCreateSession(boolean) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy
setAlwaysRemember(boolean) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setAlwaysUseDefaultTargetUrl(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  If `true`, will always redirect to the value of `defaultTargetUrl` (defaults to `false`).
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.logout.LogoutSuccessEventPublishingLogoutHandler
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy
  Sets the `ApplicationEventPublisher` to use for submitting `SessionFixationProtectionEvent`.
setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
setAsText(String) - Method in class org.springframework.security.web.util.matcher.RequestMatcherEditor
setAttrName(String) - Method in class org.springframework.security.web.webauthn.authentication.HttpSessionPublicKeyCredentialRequestOptionsRepository
setAttrName(String) - Method in class org.springframework.security.web.webauthn.registration.HttpSessionPublicKeyCredentialCreationOptionsRepository
setAuthenticated(boolean) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthentication
setAuthenticated(boolean) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationRequestToken
setAuthenticationConverter(Function<ServerWebExchange, Mono<Authentication>>) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Deprecated.
  As of 5.1 in favor of `AuthenticationWebFilter.setServerAuthenticationConverter(ServerAuthenticationConverter)`
setAuthenticationConverter(AuthenticationConverter) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
setAuthenticationConverter(AuthenticationConverter) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Sets the `AuthenticationConverter` to use.
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Sets the `AuthenticationDetailsSource` to use.
setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setAuthenticationEntryPoint(DigestAuthenticationEntryPoint) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setAuthenticationEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `AuthenticationEntryPoint` used when integrating `HttpServletRequest` with Servlet 3 APIs.
setAuthenticationEntryPoint(ServerAuthenticationEntryPoint) - Method in class org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter
  Sets the authentication entry point used when authentication is required
setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Sets the strategy used to handle a failed authentication.
setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.session.SessionManagementFilter
  The handler which will be invoked if the `AuthenticatedSessionStrategy` raises a `SessionAuthenticationException`, indicating that the user is not allowed to be authenticated for this session (typically because they already have too many sessions open).
setAuthenticationFailureHandler(ServerAuthenticationFailureHandler) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Sets the failure handler used when authentication fails.
setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `AuthenticationManager` used when integrating `HttpServletRequest` with Servlet 3 APIs.
setAuthenticationManagerResolver(AuthenticationManagerResolver<HttpServletRequest>) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Sets the strategy used to handle a successful authentication.
setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Sets the strategy used to handle a successful authentication.
setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  Allows control over the destination a remembered user is sent to when they are successfully authenticated.
setAuthenticationSuccessHandler(ServerAuthenticationSuccessHandler) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Sets the authentication success handler.
setAuthenticationTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
setAuthenticationTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter
  Sets the authentication trust resolver.
setAuthenticationUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setAuthoritiesMapper(GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setAuthorizationEventPublisher(AuthorizationEventPublisher) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  Use this `AuthorizationEventPublisher` to publish `AuthorizationDeniedEvent`s and `AuthorizationGrantedEvent`s.
setBeanFactory(BeanFactory) - Method in class org.springframework.security.web.DefaultSecurityFilterChain
setBeanName(String) - Method in class org.springframework.security.web.DefaultSecurityFilterChain
setBeanResolver(BeanResolver) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
  Sets the `BeanResolver` to be used on the expressions
setBeanResolver(BeanResolver) - Method in class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
  Set the `BeanResolver` to be used on the expressions
setBeanResolver(BeanResolver) - Method in class org.springframework.security.web.reactive.result.method.annotation.AuthenticationPrincipalArgumentResolver
  Sets the `BeanResolver` to be used on the expressions
setBeanResolver(BeanResolver) - Method in class org.springframework.security.web.reactive.result.method.annotation.CurrentSecurityContextArgumentResolver
  Sets the `BeanResolver` to be used on the expressions
setCacheSecurityContext(boolean) - Method in class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
  If set to true the result of `WebSessionServerSecurityContextRepository.load(ServerWebExchange)` will use `Mono.cache()` to prevent multiple lookups.
setChannelDecisionManager(ChannelDecisionManager) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
setChannelProcessors(List<?>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
setCheckForPrincipalChanges(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  If set, the pre-authenticated principal will be checked on each request and compared against the name of the current `Authentication` object.
setClearAuthentication(boolean) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
  If true, removes the `Authentication` from the `SecurityContext` to prevent issues with concurrent requests.
setContentLength(int) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
setContentLengthLong(long) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper
setContextPath(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setContextPath(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setContextRelative(boolean) - Method in class org.springframework.security.web.DefaultRedirectStrategy
  If `true`, causes any redirection URLs to be calculated minus the protocol and context path (defaults to `false`).
setContextRelative(boolean) - Method in class org.springframework.security.web.server.DefaultServerRedirectStrategy
  Sets if the location is relative to the context.
setContinueChainBeforeSuccessfulAuthentication(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Indicates if the filter chain should be continued prior to delegation to `AbstractAuthenticationProcessingFilter.successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication)` , which may be useful in certain environment (such as Tapestry applications).
setContinueFilterChainOnUnsuccessfulAuthentication(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  If set to `true` (the default), any `AuthenticationException` raised by the `AuthenticationManager` will be swallowed, and the request will be allowed to proceed, potentially using alternative authentication mechanisms.
setContinueOnError(boolean) - Method in class org.springframework.security.web.server.authentication.DelegatingServerAuthenticationConverter
  Continue iterating when a delegate errors, defaults to `false`
setConverter(GenericHttpMessageConverter<Object>) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationFilter
  Sets the `GenericHttpMessageConverter` to use for writing `PublicKeyCredential<AuthenticatorAssertionResponse>` to the response.
setConverter(HttpMessageConverter<Object>) - Method in class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler
  Sets the `GenericHttpMessageConverter` to write to the response.
setConverter(HttpMessageConverter<Object>) - Method in class org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsFilter
  Sets the `HttpMessageConverter` to use.
setConverter(HttpMessageConverter<Object>) - Method in class org.springframework.security.web.webauthn.registration.WebAuthnRegistrationFilter
  Set the `HttpMessageConverter` to read the `WebAuthnRegistrationFilter.WebAuthnRegistrationRequest` and write the response.
setCookie(String[], int, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Sets the cookie on the response.
setCookieCustomizer(Consumer<Cookie>) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Sets the `Consumer`, allowing customization of cookie.
setCookieCustomizer(Consumer<Cookie>) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
  Sets the `Consumer`, allowing customization of cookie.
setCookieCustomizer(Consumer<ResponseCookie.ResponseCookieBuilder>) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Add a `Consumer` for a `ResponseCookieBuilder` that will be invoked for each cookie being built, just before the call to `build()`.
setCookieCustomizer(Consumer<ResponseCookie.ResponseCookieBuilder>) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Add a `Consumer` for a `ResponseCookieBuilder` that will be invoked for each cookie being built, just before the call to `build()`.
setCookieCustomizer(Consumer<ResponseCookie.ResponseCookieBuilder>) - Method in class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
  Sets the `Consumer`, allowing customization of cookie.
setCookieDomain(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setCookieDomain(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Deprecated.
  Use `CookieCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieDomain(String) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Deprecated.
  Use `CookieServerCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieHttpOnly(boolean) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Deprecated.
  Use `CookieCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieHttpOnly(boolean) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Deprecated.
  Use `CookieServerCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieMaxAge(int) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Deprecated.
  Use `CookieCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieMaxAge(int) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Deprecated.
  Use `CookieServerCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setCookieName(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setCookieName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Sets the name of the cookie that the expected CSRF token is saved to and read from.
setCookieName(String) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Sets the cookie name
setCookiePath(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Set the path that the Cookie will be created with.
setCookiePath(String) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Sets the cookie path
setCookies(List<Cookie>) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setCookies(List<SavedCookie>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setCreateAuthenticatedToken(boolean) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
  If you set this property, the Authentication object, which is created after the successful digest authentication will be marked as authenticated and filled with the authorities loaded by the UserDetailsService.
setCreateEmptySubject(boolean) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter
  Sets `createEmptySubject`.
setCreateNewSession(boolean) - Method in class org.springframework.security.web.session.RequestedUrlRedirectInvalidSessionStrategy
  Determines whether a new session should be created before redirecting (to avoid possible looping issues where the same session ID is sent with the redirected request).
setCreateNewSession(boolean) - Method in class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy
  Determines whether a new session should be created before redirecting (to avoid possible looping issues where the same session ID is sent with the redirected request).
setCreateSessionAllowed(boolean) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
  If `true`, indicates that it is permitted to store the target URL and exception information in a new `HttpSession` (the default).
setCreateTableOnStartup(boolean) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
  Intended for convenience in debugging.
setCreationOptionsRepository(PublicKeyCredentialCreationOptionsRepository) - Method in class org.springframework.security.web.webauthn.registration.WebAuthnRegistrationFilter
  Sets the `PublicKeyCredentialCreationOptionsRepository` to use.
setCredentialsCharset(String) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Sets the charset to use when decoding credentials to `String`s.
setCredentialsCharset(Charset) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationConverter
setCredentialsCharset(Charset) - Method in class org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter
  Deprecated.
  Sets the `Charset` used to decode the Base64-encoded bytes of the basic authentication credentials.
setCredentialsEnvironmentVariable(String) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
setCredentialsRequestHeader(String) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
setCsrfRequestAttributeName(String) - Method in class org.springframework.security.web.csrf.CsrfTokenRequestAttributeHandler
  The `CsrfToken` is available as a request attribute named `CsrfToken.class.getName()`.
setCsrfTokenRepository(ServerCsrfTokenRepository) - Method in class org.springframework.security.web.server.csrf.CsrfWebFilter
setCustomizeCreationOptions(Consumer<PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder>) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
  Sets a `Consumer` used to customize the `PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder` for `Webauthn4JRelyingPartyOperations.createPublicKeyCredentialCreationOptions(PublicKeyCredentialCreationOptionsRequest)`.
setCustomizeRequestOptions(Consumer<PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder>) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
  Sets a `Consumer` used to customize the `PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder` for `Webauthn4JRelyingPartyOperations.createCredentialRequestOptions(PublicKeyCredentialRequestOptionsRequest)`.The default values are always populated, but can be overridden with this property.
setDefaultAccessDeniedHandler(ServerAccessDeniedHandler) - Method in class org.springframework.security.web.server.authorization.ServerWebExchangeDelegatingServerAccessDeniedHandler
  Use this `ServerAccessDeniedHandler` when no `ServerWebExchangeMatcher` matches.
setDefaultAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.authentication.RequestMatcherDelegatingAuthenticationManagerResolver
  Set the default `AuthenticationManager` to use when a request does not match
setDefaultAuthenticationManager(ReactiveAuthenticationManager) - Method in class org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver
  Set the default `ReactiveAuthenticationManager` to use when a request does not match
setDefaultEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint
  EntryPoint which is used when no RequestMatcher returned true
setDefaultEntryPoint(ServerAuthenticationEntryPoint) - Method in class org.springframework.security.web.server.DelegatingServerAuthenticationEntryPoint
  EntryPoint which is used when no RequestMatcher returned true
setDefaultFailureUrl(String) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
  The URL which will be used as the failure destination.
setDefaultLogoutSuccessHandler(LogoutSuccessHandler) - Method in class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler
  Sets the default `LogoutSuccessHandler` if no other handlers available
setDefaultRolePrefix(String) - Method in class org.springframework.security.web.access.expression.DefaultHttpSecurityExpressionHandler
  Sets the default prefix to be added to `SecurityExpressionRoot.hasAnyRole(String...)` or `SecurityExpressionRoot.hasRole(String)`.
setDefaultRolePrefix(String) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler
  Sets the default prefix to be added to `SecurityExpressionRoot.hasAnyRole(String...)` or `SecurityExpressionRoot.hasRole(String)`.
setDefaultTargetUrl(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Supplies the default target Url that will be used if no saved request is found in the session, or the `alwaysUseDefaultTargetUrl` property is set to true.
setDeferLoadToken(boolean) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository
  Deprecated.
  Determines if `LazyCsrfTokenRepository.loadToken(HttpServletRequest)` should be lazily loaded.
setDetails(HttpServletRequest, UsernamePasswordAuthenticationToken) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Provided so that subclasses may configure what is put into the authentication request's details property.
setDisableUrlRewriting(boolean) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  Allows the use of session identifiers in URLs to be disabled.
setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
setErrorPage(String) - Method in class org.springframework.security.web.access.AccessDeniedHandlerImpl
  The error page to use.
setExceptionIfHeaderMissing(boolean) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
  Defines whether an exception should be raised if the principal header is missing.
setExceptionIfMaximumExceeded(boolean) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  Sets the `exceptionIfMaximumExceeded` property, which determines whether the user should be prevented from opening more sessions than allowed.
setExceptionIfVariableMissing(boolean) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
  Defines whether an exception should be raised if the principal variable is missing.
setExceptionMappings(Map<?, ?>) - Method in class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler
  Sets the map of exception types (by name) to URLs.
setExchangeRejectedHandler(ServerExchangeRejectedHandler) - Method in class org.springframework.security.web.server.WebFilterChainProxy
  Handles `ServerExchangeRejectedException` when the `ServerWebExchangeFirewall` rejects the provided `ServerWebExchange`.
setExitUserMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Set the matcher to respond to exit user processing.
setExitUserMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Set the matcher to respond to exit user processing.
setExitUserUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Set the URL to respond to exit user processing.
setExitUserUrl(String) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Set the URL to respond to exit user processing.
setExpressionHandler(SecurityExpressionHandler<RequestAuthorizationContext>) - Method in class org.springframework.security.web.access.expression.WebExpressionAuthorizationManager
  Sets the `SecurityExpressionHandler` to be used.
setExpressionHandler(SecurityExpressionHandler<FilterInvocation>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter
  Deprecated.
setFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
setFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Used to define custom behaviour when a switch fails.
setFailureUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setFilterAsyncDispatch(boolean) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  If set to true, the filter will be applied to the async dispatcher.
setFilterChainDecorator(FilterChainProxy.FilterChainDecorator) - Method in class org.springframework.security.web.FilterChainProxy
  Used to decorate the original `FilterChain` for each request
setFilterChainDecorator(WebFilterChainProxy.WebFilterChainDecorator) - Method in class org.springframework.security.web.server.WebFilterChainProxy
  Used to decorate the original `WebFilterChain` for each request
setFilterChainValidator(FilterChainProxy.FilterChainValidator) - Method in class org.springframework.security.web.FilterChainProxy
  Used (internally) to specify a validation strategy for the filters in each configured chain.
setFilterErrorDispatch(boolean) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  If set to true, the filter will be applied to error dispatcher.
setFilterProcessesUrl(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Sets the URL that determines if authentication is required
setFilterProcessesUrl(String) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter
setFirewall(HttpFirewall) - Method in class org.springframework.security.web.FilterChainProxy
  Sets the "firewall" implementation which will be used to validate and wrap (or potentially reject) the incoming requests.
setFirewall(ServerWebExchangeFirewall) - Method in class org.springframework.security.web.server.WebFilterChainProxy
  Protects the application using the provided `StrictServerWebExchangeFirewall`.
setForceEagerSessionCreation(boolean) - Method in class org.springframework.security.web.context.SecurityContextPersistenceFilter
  Deprecated.
setForceHttps(boolean) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
  Set to true to force login form access to be via https.
setFormLoginEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setFormLoginEnabled(boolean) - Method in class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
setGenerateOneTimeTokenUrl(String) - Method in class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
  Specifies the URL that a One-Time Token generate request will be processed.
setHeaderName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Sets the name of the HTTP header that should be used to provide the token.
setHeaderName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
  Sets the header name that the `CsrfToken` is expected to appear on and the header that the response will contain the `CsrfToken`.
setHeaderName(String) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Sets the header name
setHeaderName(String) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
  Sets the header name that the `CsrfToken` is expected to appear on and the header that the response will contain the `CsrfToken`.
setHeaders(Map<String, List<String>>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setHeaders(Map<String, List<String>>) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setHeaderValue(XXssProtectionHeaderWriter.HeaderValue) - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter
  Sets the value of the X-XSS-PROTECTION header.
setHeaderValue(XXssProtectionServerHttpHeadersWriter.HeaderValue) - Method in class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter
  Sets the value of the X-XSS-PROTECTION header.
setHttpStatus(HttpStatus) - Method in class org.springframework.security.web.server.DefaultServerRedirectStrategy
  The `HttpStatus` to use for the redirect.
setIgnoredMediaTypes(Set<MediaType>) - Method in class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
  Set the `MediaType` to ignore from the `ContentNegotiationStrategy`.
setIgnoredMediaTypes(Set<MediaType>) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  Set the `MediaType` to ignore from the `ContentNegotiationStrategy`.
setIncludeSubDomains(boolean) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  If true, the pinning policy applies to this pinned host as well as any subdomains of the host's domain name.
setIncludeSubDomains(boolean) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter
  If true, subdomains should be considered HSTS Hosts too.
setIncludeSubDomains(boolean) - Method in class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
  Sets if subdomains should be included.
setInsecureKeyword(String) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
setInvalidateHttpSession(boolean) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
  Causes the `HttpSession` to be invalidated when this `LogoutHandler` is invoked.
setInvalidateSessionOnPrincipalChange(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  If `checkForPrincipalChanges` is set, and a change of principal is detected, determines whether any existing session should be invalidated before proceeding to authenticate the new principal.
setInvalidSessionStrategy(InvalidSessionStrategy) - Method in class org.springframework.security.web.session.SessionManagementFilter
  Sets the strategy which will be invoked instead of allowing the filter chain to proceed, if the user agent requests an invalid session ID.
setKey(String) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
setLocales(List<Locale>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setLocales(List<Locale>) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setLocation(URI) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
  Where the user is redirected to upon authentication success
setLoginPageUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setLoginProcessingUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultOneTimeTokenSubmitPageGeneratingFilter
  Specifies the URL that the submit form should POST to.
setLoginProcessingUrl(String) - Method in class org.springframework.security.web.server.ui.OneTimeTokenSubmitPageGeneratingWebFilter
  Specifies the URL that the submit form should POST to.
setLogoutHandler(ServerLogoutHandler) - Method in class org.springframework.security.web.server.authentication.logout.LogoutWebFilter
  Sets the `ServerLogoutHandler`.
setLogoutHandlers(List<LogoutHandler>) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `LogoutHandler`s used when integrating with `HttpServletRequest` with Servlet 3 APIs.
setLogoutHandlers(List<LogoutHandler>) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
  Set list of `LogoutHandler`
setLogoutHandlers(LogoutHandler[]) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
setLogoutRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter
setLogoutSuccessHandler(ServerLogoutSuccessHandler) - Method in class org.springframework.security.web.server.authentication.logout.LogoutWebFilter
  Sets the `ServerLogoutSuccessHandler`.
setLogoutSuccessUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setLogoutSuccessUrl(URI) - Method in class org.springframework.security.web.server.authentication.logout.RedirectServerLogoutSuccessHandler
  The URL to redirect to after successfully logging out.
setMappableRolesRetriever(MappableAttributesRetriever) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
setMatchingAlgorithm(TokenBasedRememberMeServices.RememberMeTokenAlgorithm) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
  Sets the algorithm to be used to match the token signature
setMatchingRequestParameterName(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setMatchingRequestParameterName(String) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
  Specify the name of a query parameter that is added to the URL that specifies the request cache should be checked in `HttpSessionRequestCache.getMatchingRequest(HttpServletRequest, HttpServletResponse)`
setMatchingRequestParameterName(String) - Method in class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
  Specify the name of a query parameter that is added to the URL in `WebSessionServerRequestCache.getRedirectUri(ServerWebExchange)` and is required for `WebSessionServerRequestCache.removeMatchingRequest(ServerWebExchange)` to look up the `ServerHttpRequest`.
setMaxAge(Duration) - Method in class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
  Sets the max age of the header.
setMaxAgeInSeconds(long) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Sets the value (in seconds) for the max-age directive of the Public-Key-Pins header.
setMaxAgeInSeconds(long) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter
  Sets the value (in seconds) for the max-age directive of the Strict-Transport-Security header.
setMaximumSessions(int) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  Sets the `maxSessions` property.
setMessageSource(MessageSource) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy
  Sets the `MessageSource` used for reporting errors back to the user when the user has exceeded the maximum number of authentications.
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setMethod(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setMethod(String) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setMethod(HttpMethod) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
setMigrateSessionAttributes(boolean) - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy
  Defines whether attributes should be migrated to a new session or not.
setMode(XFrameOptionsServerHttpHeadersWriter.Mode) - Method in class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter
  Sets the X-Frame-Options mode.
setNonceValiditySeconds(int) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
setOauth2AuthenticationUrlToClientName(Map<String, String>) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setOauth2AuthenticationUrlToClientName(Map<String, String>) - Method in class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
setOauth2LoginEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setObserveOncePerRequest(boolean) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  Sets whether this filter apply only once per request.
setObserveOncePerRequest(boolean) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
setOneTimeTokenEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setOneTimeTokenEnabled(boolean) - Method in class org.springframework.security.web.server.ui.LoginPageGeneratingWebFilter
  Set if one-time token login is supported.
setOneTimeTokenGenerationUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setOrder(int) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
setOrder(int) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
setParameter(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Sets the name of the parameter which should be checked for to see if a remember-me has been requested during a login request.
setParameterName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Sets the name of the HTTP request parameter that should be used to provide a token.
setParameterName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
  Sets the `HttpServletRequest` parameter name that the `CsrfToken` is expected to appear on
setParameterName(String) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Sets the parameter name
setParameterName(String) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
  Sets the `HttpServletRequest` parameter name that the `CsrfToken` is expected to appear on
setParameters(Map<String, String[]>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setParameters(Map<String, String[]>) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setPasskeysEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setPasswordAlreadyEncoded(boolean) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setPasswordParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setPasswordParameter(String) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Sets the parameter name which will be used to obtain the password from the login request..
setPasswordParameter(String) - Method in class org.springframework.security.web.server.ServerFormLoginAuthenticationConverter
  Deprecated.
  The parameter name of the form data to extract the password
setPathInfo(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setPathInfo(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setPins(Map<String, String>) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Sets the value for the pin- directive of the Public-Key-Pins header.
setPolicy(String) - Method in class org.springframework.security.web.header.writers.PermissionsPolicyHeaderWriter
  Sets the policy to be used in the response header.
setPolicy(String) - Method in class org.springframework.security.web.server.header.PermissionsPolicyServerHttpHeadersWriter
  Set the policy to be used in the response header.
setPolicy(CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy) - Method in class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter
  Sets the `CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy` value to be used in the `Cross-Origin-Embedder-Policy` header
setPolicy(CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy) - Method in class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter
  Sets the `CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy` value to be used in the `Cross-Origin-Opener-Policy` header
setPolicy(CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy) - Method in class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter
  Sets the `CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy` value to be used in the `Cross-Origin-Resource-Policy` header
setPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy) - Method in class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter
  Sets the policy to be used in the response header.
setPolicy(CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy) - Method in class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter
  Sets the `CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy` value to be used in the `Cross-Origin-Embedder-Policy` header
setPolicy(CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy) - Method in class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter
  Sets the `CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy` value to be used in the `Cross-Origin-Opener-Policy` header
setPolicy(CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy) - Method in class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter
  Sets the `CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy` value to be used in the `Cross-Origin-Embedder-Policy` header
setPolicy(ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy) - Method in class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter
  Set the policy to be used in the response header.
setPolicyDirectives(String) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
  Sets the security policy directive(s) to be used in the response header.
setPolicyDirectives(String) - Method in class org.springframework.security.web.header.writers.FeaturePolicyHeaderWriter
  Set the security policy directive(s) to be used in the response header.
setPolicyDirectives(String) - Method in class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
  Set the policy directive(s) to be used in the response header.
setPolicyDirectives(String) - Method in class org.springframework.security.web.server.header.FeaturePolicyServerHttpHeadersWriter
  Set the policy directive(s) to be used in the response header.
setPort(int) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setPortMapper(PortMapper) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
setPortMapper(PortMapper) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
setPortMapper(PortMapper) - Method in class org.springframework.security.web.PortResolverImpl
setPortMapper(PortMapper) - Method in class org.springframework.security.web.server.transport.HttpsRedirectWebFilter
  Use this `PortMapper` for mapping custom ports
setPortMappings(Map<String, String>) - Method in class org.springframework.security.web.PortMapperImpl
  Set to override the default HTTP port to HTTPS port mappings of 80:443, and 8080:8443.
setPortResolver(PortResolver) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
setPortResolver(PortResolver) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
setPortResolver(PortResolver) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
setPostOnly(boolean) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Defines whether only HTTP POST requests will be allowed by this filter.
setPreAuthenticatedUserDetailsService(AuthenticationUserDetailsService<PreAuthenticatedAuthenticationToken>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  Set the AuthenticatedUserDetailsService to be used to load the `UserDetails` for the authenticated user.
setPreload(boolean) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter
  If true, preload will be included in HSTS Header.
setPreload(boolean) - Method in class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
  Sets if preload should be included.
setPrincipalEnvironmentVariable(String) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter
setPrincipalExtractor(X509PrincipalExtractor) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter
setPrincipalRequestHeader(String) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter
setQuery(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setQueryString(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setRealm(String) - Method in class org.springframework.security.web.server.authentication.HttpBasicServerAuthenticationEntryPoint
  Sets the realm to be used
setRealmName(String) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint
setRealmName(String) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint
  Sets the strategy to be used for redirecting to the required channel URL.
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  Allows overriding of the behaviour when redirecting to a target URL.
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
  Allows overriding of the behaviour when redirecting to a target URL.
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
  Deprecated.
  use `ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)` instead.
setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.session.RequestedUrlRedirectInvalidSessionStrategy
  Sets the redirect strategy to use.
setRedirectStrategy(ServerRedirectStrategy) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationEntryPoint
  Sets the RedirectStrategy to use.
setRedirectStrategy(ServerRedirectStrategy) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler
  Sets the RedirectStrategy to use.
setRedirectStrategy(ServerRedirectStrategy) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
  The RedirectStrategy to use.
setRedirectUrl(String) - Method in class org.springframework.security.web.savedrequest.SimpleSavedRequest
setRememberMeParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setRememberMeServices(RememberMeServices) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setRememberMeServices(RememberMeServices) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
setReportOnly(boolean) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
  If true, includes the Content-Security-Policy-Report-Only header in the response, otherwise, defaults to the Content-Security-Policy header.
setReportOnly(boolean) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  To get a Public-Key-Pins header you should set this to false, otherwise the header will be Public-Key-Pins-Report-Only.
setReportOnly(boolean) - Method in class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
  Set whether to include the `Content-Security-Policy-Report-Only` header in the response.
setReportUri(String) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Sets the URI to which the browser should report pin validation failures.
setReportUri(URI) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
  Sets the URI to which the browser should report pin validation failures.
setRequest(HttpServletRequest) - Method in class org.springframework.security.web.context.HttpRequestResponseHolder
  Deprecated.
setRequestCache(RequestCache) - Method in class org.springframework.security.web.authentication.HttpMessageConverterAuthenticationSuccessHandler
  Sets the `RequestCache` to use.
setRequestCache(RequestCache) - Method in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler
setRequestCache(ServerRequestCache) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationEntryPoint
  The request cache to use to save the request before sending a redirect.
setRequestCache(ServerRequestCache) - Method in class org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler
  Sets the `ServerRequestCache` used to redirect to.
setRequestCache(ServerRequestCache) - Method in class org.springframework.security.web.server.savedrequest.ServerRequestCacheWebFilter
setRequestHandler(CsrfTokenRequestHandler) - Method in class org.springframework.security.web.csrf.CsrfAuthenticationStrategy
  Specify a `CsrfTokenRequestHandler` to use for making the `CsrfToken` available as a request attribute.
setRequestHandler(CsrfTokenRequestHandler) - Method in class org.springframework.security.web.csrf.CsrfFilter
  Specifies a `CsrfTokenRequestHandler` that is used to make the `CsrfToken` available as a request attribute.
setRequestHandler(ServerCsrfTokenRequestHandler) - Method in class org.springframework.security.web.server.csrf.CsrfWebFilter
  Specifies a `ServerCsrfTokenRequestHandler` that is used to make the `CsrfToken` available as an exchange attribute.
setRequestMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.authentication.ott.GenerateOneTimeTokenWebFilter
  Use the given `ServerWebExchangeMatcher` to match the request.
setRequestMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.ui.OneTimeTokenSubmitPageGeneratingWebFilter
  Use this `ServerWebExchangeMatcher` to choose whether this filter will handle the request.
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.ott.GenerateOneTimeTokenFilter
  Use the given `RequestMatcher` to match the request.
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.ui.DefaultOneTimeTokenSubmitPageGeneratingFilter
  Use this `RequestMatcher` to choose whether this filter will handle the request.
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter
  Sets the `RequestMatcher` used to determine if the "Strict-Transport-Security" should be added.
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.savedrequest.CookieRequestCache
  Allows selective use of saved requests for a subset of requests.
setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
  Allows selective use of saved requests for a subset of requests.
setRequestOptionsRepository(PublicKeyCredentialRequestOptionsRepository) - Method in class org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsFilter
  Sets the `PublicKeyCredentialRequestOptionsRepository` to use.
setRequestOptionsRepository(PublicKeyCredentialRequestOptionsRepository) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationFilter
  Sets the `PublicKeyCredentialRequestOptionsRepository` to use.
setRequestRejectedHandler(RequestRejectedHandler) - Method in class org.springframework.security.web.FilterChainProxy
  Sets the `RequestRejectedHandler` to be used for requests rejected by the firewall.
setRequestTransformer(AuthorizationManagerWebInvocationPrivilegeEvaluator.HttpServletRequestTransformer) - Method in class org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator
  Set a `AuthorizationManagerWebInvocationPrivilegeEvaluator.HttpServletRequestTransformer` to be used prior to passing to the `AuthorizationManager`.
setRequestURI(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setRequestURL(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setRequireCsrfProtectionMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.csrf.CsrfWebFilter
setRequireCsrfProtectionMatcher(RequestMatcher) - Method in class org.springframework.security.web.csrf.CsrfFilter
  Specifies a `RequestMatcher` that is used to determine if CSRF protection should be applied.
setRequiresAuthenticationMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Sets the matcher used to determine when creating an `Authentication` from `AuthenticationWebFilter.setServerAuthenticationConverter(ServerAuthenticationConverter)` to be authentication.
setRequiresAuthenticationRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
setRequiresAuthenticationRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Sets the request matcher to check whether to proceed the request further.
setRequiresHttpsRedirectMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.transport.HttpsRedirectWebFilter
  Use this `ServerWebExchangeMatcher` to narrow which requests are redirected to HTTPS.
setRequiresLogoutMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.authentication.logout.LogoutWebFilter
setResolveHeaders(Function<HttpServletRequest, Map<String, String>>) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
  Sets a Function used to resolve a Map of the HTTP headers where the key is the name of the header and the value is the value of the header.
setResolveHiddenInputs(Function<HttpServletRequest, Map<String, String>>) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
  Sets a Function used to resolve a Map of the hidden inputs where the key is the name of the input and the value is the value of the input.
setResolveHiddenInputs(Function<HttpServletRequest, Map<String, String>>) - Method in class org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter
  Sets a Function used to resolve a Map of the hidden inputs where the key is the name of the input and the value is the value of the input.
setResolveHiddenInputs(Function<HttpServletRequest, Map<String, String>>) - Method in class org.springframework.security.web.authentication.ui.DefaultOneTimeTokenSubmitPageGeneratingFilter
  Sets a Function used to resolve a Map of the hidden inputs where the key is the name of the input and the value is the value of the input.
setResourceLoader(ResourceLoader) - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever
setResponse(HttpServletResponse) - Method in class org.springframework.security.web.context.HttpRequestResponseHolder
  Deprecated.
setRestClient(RestClient) - Method in class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiPasswordChecker
  Sets the `RestClient` to use when making requests to Have I Been Pwned REST API.
setRethrowAuthenticationServiceException(boolean) - Method in class org.springframework.security.web.authentication.AuthenticationEntryPointFailureHandler
  Set whether to rethrow `AuthenticationServiceException`s (defaults to true)
setRethrowAuthenticationServiceException(boolean) - Method in class org.springframework.security.web.server.authentication.ServerAuthenticationEntryPointFailureHandler
  Set whether to rethrow `AuthenticationServiceException`s (defaults to true)
setRolePrefix(String) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
setSaml2AuthenticationUrlToProviderName(Map<String, String>) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setSaml2LoginEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setSaveRequestMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.savedrequest.CookieServerRequestCache
  Sets the matcher to determine if the request should be saved.
setSaveRequestMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
  Sets the matcher to determine if the request should be saved.
setScheme(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setScheme(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setSecure(boolean) - Method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Deprecated.
  Use `CookieServerCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setSecure(Boolean) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Deprecated.
  Use `CookieCsrfTokenRepository.setCookieCustomizer(Consumer)` instead.
setSecureKeyword(String) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
setSecureRandom(SecureRandom) - Method in class org.springframework.security.web.csrf.XorCsrfTokenRequestAttributeHandler
  Specifies the `SecureRandom` used to generate random bytes that are used to mask the value of the `CsrfToken` on each request.
setSecureRandom(SecureRandom) - Method in class org.springframework.security.web.server.csrf.XorServerCsrfTokenRequestAttributeHandler
  Specifies the `SecureRandom` used to generate random bytes that are used to mask the value of the `CsrfToken` on each request.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.NullSecurityContextRepository
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.RequestAttributeSecurityContextRepository
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper
  Deprecated.
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.SecurityContextHolderFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.context.SecurityContextPersistenceFilter
  Deprecated.
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.FilterChainProxy
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.session.SessionManagementFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextHolderStrategy(SecurityContextHolderStrategy) - Method in class org.springframework.security.web.webauthn.authentication.PublicKeyCredentialRequestOptionsFilter
  Sets the `SecurityContextHolderStrategy` to use.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler
  Sets the `SecurityContextRepository` to use.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on switch user success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
  Sets the `SecurityContextRepository` to save the `SecurityContext` on authentication success.
setSecurityContextRepository(SecurityContextRepository) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `SecurityContextRepository` to use.
setSecurityContextRepository(ServerSecurityContextRepository) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Sets the repository for persisting the SecurityContext.
setSecurityContextRepository(ServerSecurityContextRepository) - Method in class org.springframework.security.web.server.authentication.logout.SecurityContextServerLogoutHandler
  Sets the `ServerSecurityContextRepository` that should be used for logging out.
setSecurityContextRepository(ServerSecurityContextRepository) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Sets the repository for persisting the SecurityContext.
setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter
setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor
  Deprecated.
setSeriesLength(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
setServerAuthenticationConverter(ServerAuthenticationConverter) - Method in class org.springframework.security.web.server.authentication.AuthenticationWebFilter
  Sets the strategy used for converting from a `ServerWebExchange` to an `Authentication` used for authenticating with the provided `ReactiveAuthenticationManager`.
setServerName(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setServerName(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setServerPort(int) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setServletContext(ServletContext) - Method in class org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator
setServletContext(ServletContext) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator
  Deprecated.
setServletContext(ServletContext) - Method in class org.springframework.security.web.access.RequestMatcherDelegatingWebInvocationPrivilegeEvaluator
setServletPath(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder
setServletPath(String) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
  The servlet path to match on.
setServletPath(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder
setSessionAttributeName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository
  Sets the `HttpSession` attribute name that the `CsrfToken` is stored in
setSessionAttributeName(String) - Method in class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
  Sets the `HttpSession` attribute name that the `CsrfToken` is stored in
setSessionAttrName(String) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache
  If the `sessionAttrName` property is set, the request is stored in the session using this attribute name.
setSessionAuthenticationStrategy(SessionAuthenticationStrategy) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  The session handling strategy which will be invoked immediately after an authentication request is successfully processed by the `AuthenticationManager`.
setSessionAuthenticationStrategy(SessionAuthenticationStrategy) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
  The session handling strategy which will be invoked immediately after an authentication request is successfully processed by the `AuthenticationManager`.
setSessionLimit(SessionLimit) - Method in class org.springframework.security.web.server.authentication.ConcurrentSessionControlServerAuthenticationSuccessHandler
  Sets the strategy used to resolve the maximum number of sessions that are allowed for a specific `Authentication`.
setShouldFilterAllDispatcherTypes(boolean) - Method in class org.springframework.security.web.access.intercept.AuthorizationFilter
  Deprecated, for removal: This API element is subject to removal in a future version.
  Permit access to the `DispatcherType` instead.

       @Configuration
       @EnableWebSecurity
       public class SecurityConfig {

              @Bean
              public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
                      http
                              .authorizeHttpRequests((authorize) -> authorize
                                      .dispatcherTypeMatchers(DispatcherType.ERROR).permitAll()
                                      // ...
                              );
                      return http.build();
              }
       }

setShouldWriteHeadersEagerly(boolean) - Method in class org.springframework.security.web.header.HeaderWriterFilter
  Allow writing headers at the beginning of the request.
setSpringSecurityContextAttrName(String) - Method in class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
  Sets the session attribute name used to save and load the `SecurityContext`
setSpringSecurityContextKey(String) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  Allows the session attribute name to be customized for this repository instance.
setStatusCode(HttpStatus) - Method in class org.springframework.security.web.DefaultRedirectStrategy
  Sets the HTTP status code to use.
setSubjectDnRegex(String) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
  Sets the regular expression which will by used to extract the user name from the certificate's Subject DN.
setSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.AuthenticationFilter
setSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Used to define custom behaviour on a successful switch or exit user.
setSwitchAuthorityRole(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Allows the role of the switchAuthority to be customized.
setSwitchFailureUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the URL to which a user should be redirected if the switch fails.
setSwitchUserAuthorityChanger(SwitchUserAuthorityChanger) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
setSwitchUserMatcher(ServerWebExchangeMatcher) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Set the matcher to respond to switch user processing.
setSwitchUserMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Set the matcher to respond to switch user processing.
setSwitchUserUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Set the URL to respond to switch user processing.
setSwitchUserUrl(String) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Set the URL to respond to switch user processing.
setTargetUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the URL to go to after a successful switch / exit user request.
setTargetUrlParameter(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  If this property is set, the current request will be checked for this a parameter with this name and the value used as the target URL if present.
setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
  Configure AuthenticationPrincipal template resolution
setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
  Configure CurrentSecurityContext template resolution
setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.web.reactive.result.method.annotation.AuthenticationPrincipalArgumentResolver
  Configure AuthenticationPrincipal template resolution
setTemplateDefaults(AnnotationTemplateExpressionDefaults) - Method in class org.springframework.security.web.reactive.result.method.annotation.CurrentSecurityContextArgumentResolver
  Configure CurrentSecurityContext template resolution
setThrowableAnalyzer(ThrowableAnalyzer) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter
setThrowExceptionWhenTokenRejected(boolean) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  If true, causes the provider to throw a BadCredentialsException if the presented authentication request is invalid (contains a null principal or credentials).
setTokenFromMultipartDataEnabled(boolean) - Method in class org.springframework.security.web.server.csrf.ServerCsrfTokenRequestAttributeHandler
  Specifies if the `ServerCsrfTokenRequestResolver` should try to resolve the actual CSRF token from the body of multipart data requests.
setTokenLength(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
setTokenValiditySeconds(int) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
setTokenValiditySeconds(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.expression.DefaultHttpSecurityExpressionHandler
  Sets the `AuthenticationTrustResolver` to be used.
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler
  Sets the `AuthenticationTrustResolver` to be used.
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  Sets the `AuthenticationTrustResolver` to be used.
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter
  Sets the `AuthenticationTrustResolver` to be used.
setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.session.SessionManagementFilter
  Sets the `AuthenticationTrustResolver` to be used.
setUnsafeAllowAnyHttpMethod(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall
  Sets if any HTTP method is allowed.
setUnsafeAllowAnyHttpMethod(boolean) - Method in class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
  Sets if any HTTP method is allowed.
setupModule(Module.SetupContext) - Method in class org.springframework.security.web.jackson2.WebJackson2Module
setupModule(Module.SetupContext) - Method in class org.springframework.security.web.jackson2.WebServletJackson2Module
setupModule(Module.SetupContext) - Method in class org.springframework.security.web.server.jackson2.WebServerJackson2Module
setupModule(Module.SetupContext) - Method in class org.springframework.security.web.webauthn.jackson.WebauthnJackson2Module
setUseEquals(boolean) - Method in class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
  If set to true, matches on exact `MediaType`, else uses `MediaType.isCompatibleWith(MediaType)`.
setUseEquals(boolean) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
  If set to true, matches on exact `MediaType`, else uses `MediaType.isCompatibleWith(MediaType)`.
setUseForward(boolean) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint
  Tells if we are to do a forward to the `loginFormUrl` using the `RequestDispatcher`, instead of a 302 redirect.
setUseForward(boolean) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
  If set to `true`, performs a forward to the failure destination URL instead of a redirect.
setUserCache(UserCache) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  Sets the strategy which will be used to validate the loaded `UserDetails` object for the user.
setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Sets the strategy to be used to validate the `UserDetails` object obtained for the user when processing a remember-me cookie to automatically log in a user.
setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the `UserDetailsChecker` that is called on the target user whenever the user is switched.
setUserDetailsService(UserDetailsService) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Sets the authentication data access object.
setUserDetailsService(UserDetailsService) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter
setUseReferer(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
  If set to `true` the `Referer` header will be used (if available).
setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
  Allows the parameter containing the username to be customized.
setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter
setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
  Sets the parameter name which will be used to obtain the username from the login request.
setUsernameParameter(String) - Method in class org.springframework.security.web.server.ServerFormLoginAuthenticationConverter
  Deprecated.
  The parameter name of the form data to extract the username
setUserRoles2GrantedAuthoritiesMapper(Attributes2GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource
setUseSecureCookie(boolean) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
  Whether the cookie should be flagged as secure or not.
setWebAuthnManager(WebAuthnManager) - Method in class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
  Sets the `WebAuthnManager` to use.
setWebClient(WebClient) - Method in class org.springframework.security.web.authentication.password.HaveIBeenPwnedRestApiReactivePasswordChecker
  Sets the `WebClient` to use when making requests to Have I Been Pwned REST API.
setWebSphereGroups2GrantedAuthoritiesMapper(Attributes2GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource
SHA256 - Enum constant in enum class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.RememberMeTokenAlgorithm
shouldNotFilter(HttpServletRequest) - Method in class org.springframework.security.web.csrf.CsrfFilter
signature(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Set the `AuthenticatorAssertionResponse.getSignature()` property
signatureCount(long) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
SimpleRedirectInvalidSessionStrategy - Class in org.springframework.security.web.session
  Performs a redirect to a fixed URL when an invalid requested session is detected by the `SessionManagementFilter`.
SimpleRedirectInvalidSessionStrategy(String) - Constructor for class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy
SimpleRedirectSessionInformationExpiredStrategy - Class in org.springframework.security.web.session
  Performs a redirect to a fixed URL when an expired session is detected by the `ConcurrentSessionFilter`.
SimpleRedirectSessionInformationExpiredStrategy(String) - Constructor for class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy
SimpleRedirectSessionInformationExpiredStrategy(String, RedirectStrategy) - Constructor for class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy
SimpleSavedRequest - Class in org.springframework.security.web.savedrequest
  A Bean implementation of SavedRequest
SimpleSavedRequest() - Constructor for class org.springframework.security.web.savedrequest.SimpleSavedRequest
SimpleSavedRequest(String) - Constructor for class org.springframework.security.web.savedrequest.SimpleSavedRequest
SimpleSavedRequest(SavedRequest) - Constructor for class org.springframework.security.web.savedrequest.SimpleSavedRequest
SimpleUrlAuthenticationFailureHandler - Class in org.springframework.security.web.authentication
  `AuthenticationFailureHandler` which performs a redirect to the value of the `defaultFailureUrl` property when the `onAuthenticationFailure` method is called.
SimpleUrlAuthenticationFailureHandler() - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
SimpleUrlAuthenticationFailureHandler(String) - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler
SimpleUrlAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication
  `AuthenticationSuccessHandler` which can be configured with a default URL which users should be sent to upon successful authentication.
SimpleUrlAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler
SimpleUrlAuthenticationSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler
  Constructor which sets the `defaultTargetUrl` property of the base class.
SimpleUrlLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout
  Handles the navigation on logout by delegating to the `AbstractAuthenticationTargetUrlRequestHandler` base class logic.
SimpleUrlLogoutSuccessHandler() - Constructor for class org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler
skipExchange(ServerWebExchange) - Static method in class org.springframework.security.web.server.csrf.CsrfWebFilter
skipRequest(HttpServletRequest) - Static method in class org.springframework.security.web.csrf.CsrfFilter
SMART_CARD - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  smart-card indicates the respective authenticator can be contacted over ISO/IEC 7816 smart card with contacts.
SPRING_SECURITY_CONTEXT_KEY - Static variable in class org.springframework.security.web.context.HttpSessionSecurityContextRepository
  The default key under which the security context will be stored in the session.
SPRING_SECURITY_FORM_PASSWORD_KEY - Static variable in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
SPRING_SECURITY_FORM_USERNAME_KEY - Static variable in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
SPRING_SECURITY_SWITCH_USERNAME_KEY - Static variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
SPRING_SECURITY_SWITCH_USERNAME_KEY - Static variable in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
StaticAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
StaticAllowFromStrategy(URI) - Constructor for class org.springframework.security.web.header.writers.frameoptions.StaticAllowFromStrategy
  Deprecated.
StaticHeadersWriter - Class in org.springframework.security.web.header.writers
  `HeaderWriter` implementation which writes the same `Header` instance.
StaticHeadersWriter(String, String...) - Constructor for class org.springframework.security.web.header.writers.StaticHeadersWriter
  Creates a new instance with a single header
StaticHeadersWriter(List<Header>) - Constructor for class org.springframework.security.web.header.writers.StaticHeadersWriter
  Creates a new instance
StaticServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Allows specifying `HttpHeaders` that should be written to the response.
StaticServerHttpHeadersWriter(HttpHeaders) - Constructor for class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter
StaticServerHttpHeadersWriter.Builder - Class in org.springframework.security.web.server.header
STORAGE - Enum constant in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
STORAGE - Enum constant in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
STRICT_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
STRICT_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
STRICT_ORIGIN_WHEN_CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
STRICT_ORIGIN_WHEN_CROSS_ORIGIN - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
STRICT_TRANSPORT_SECURITY - Static variable in class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
StrictHttpFirewall - Class in org.springframework.security.web.firewall
  A strict implementation of `HttpFirewall` that rejects any suspicious requests with a `RequestRejectedException`.
StrictHttpFirewall() - Constructor for class org.springframework.security.web.firewall.StrictHttpFirewall
StrictServerWebExchangeFirewall - Class in org.springframework.security.web.server.firewall
  A strict implementation of `ServerWebExchangeFirewall` that rejects any suspicious requests with a `ServerExchangeRejectedException`.
StrictServerWebExchangeFirewall() - Constructor for class org.springframework.security.web.server.firewall.StrictServerWebExchangeFirewall
StrictTransportSecurityServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Writes the Strict-Transport-Security if the request is secure.
StrictTransportSecurityServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
SubjectDnX509PrincipalExtractor - Class in org.springframework.security.web.authentication.preauth.x509
  Obtains the principal from a certificate using a regular expression match against the Subject (as returned by a call to `X509Certificate.getSubjectDN()`).
SubjectDnX509PrincipalExtractor() - Constructor for class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor
successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Default behaviour for successful authentication.
successfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Puts the `Authentication` instance returned by the authentication manager into the secure context.
supports(Class<?>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter
  Deprecated.
supports(Class<?>) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
supports(Class<?>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider
  Indicate that this provider only supports PreAuthenticatedAuthenticationToken (sub)classes.
supports(Class<?>) - Method in class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationProvider
supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager
  Indicates whether this `ChannelDecisionManager` is able to process the passed `ConfigAttribute`.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor
  Indicates whether this `ChannelProcessor` is able to process the passed `ConfigAttribute`.
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor
supports(ConfigAttribute) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter
  Deprecated.
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver
  Deprecated.
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.method.annotation.CurrentSecurityContextArgumentResolver
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.reactive.result.method.annotation.AuthenticationPrincipalArgumentResolver
supportsParameter(MethodParameter) - Method in class org.springframework.security.web.reactive.result.method.annotation.CurrentSecurityContextArgumentResolver
switchUser(WebFilterExchange) - Method in class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Attempt to switch to another user.
SwitchUserAuthorityChanger - Interface in org.springframework.security.web.authentication.switchuser
  Allows subclasses to modify the `GrantedAuthority` list that will be assigned to the principal when they assume the identity of a different principal.
SwitchUserFilter - Class in org.springframework.security.web.authentication.switchuser
  Switch User processing filter responsible for user context switching.
SwitchUserFilter() - Constructor for class org.springframework.security.web.authentication.switchuser.SwitchUserFilter
SwitchUserGrantedAuthority - Class in org.springframework.security.web.authentication.switchuser
  Custom `GrantedAuthority` used by `SwitchUserFilter`
SwitchUserGrantedAuthority(String, Authentication) - Constructor for class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
SwitchUserWebFilter - Class in org.springframework.security.web.server.authentication
  Switch User processing filter responsible for user context switching.
SwitchUserWebFilter(ReactiveUserDetailsService, String, String) - Constructor for class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Creates a filter for the user context switching
SwitchUserWebFilter(ReactiveUserDetailsService, ServerAuthenticationSuccessHandler, ServerAuthenticationFailureHandler) - Constructor for class org.springframework.security.web.server.authentication.SwitchUserWebFilter
  Creates a filter for the user context switching

## T

TextEscapeUtils - Class in org.springframework.security.web.util
  Internal utility for escaping characters in HTML strings.
TextEscapeUtils() - Constructor for class org.springframework.security.web.util.TextEscapeUtils
ThrowableAnalyzer - Class in org.springframework.security.web.util
  Handler for analyzing `Throwable` instances.
ThrowableAnalyzer() - Constructor for class org.springframework.security.web.util.ThrowableAnalyzer
  Creates a new `ThrowableAnalyzer` instance.
ThrowableCauseExtractor - Interface in org.springframework.security.web.util
  Interface for handlers extracting the cause out of a specific `Throwable` type.
timeout(Duration) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getTimeout()` property.
timeout(Duration) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getTimeout()` property.
toBase64UrlString() - Method in class org.springframework.security.web.webauthn.api.Bytes
  Gets the bytes as Base64 URL encoded String.
TokenBasedRememberMeServices - Class in org.springframework.security.web.authentication.rememberme
  Identifies previously remembered users by a Base-64 encoded cookie.
TokenBasedRememberMeServices(String, UserDetailsService) - Constructor for class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
TokenBasedRememberMeServices(String, UserDetailsService, TokenBasedRememberMeServices.RememberMeTokenAlgorithm) - Constructor for class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
  Construct the instance with the parameters provided
TokenBasedRememberMeServices.RememberMeTokenAlgorithm - Enum Class in org.springframework.security.web.authentication.rememberme
toString() - Method in class org.springframework.security.web.access.expression.WebExpressionAuthorizationManager
toString() - Method in class org.springframework.security.web.access.intercept.RequestKey
toString() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails
toString() - Method in class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy
toString() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority
toString() - Method in class org.springframework.security.web.authentication.ui.DefaultResourcesFilter
toString() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails
toString() - Method in class org.springframework.security.web.DefaultSecurityFilterChain
toString() - Method in class org.springframework.security.web.FilterChainProxy
toString() - Method in class org.springframework.security.web.FilterInvocation
toString() - Method in class org.springframework.security.web.firewall.FirewalledRequest
toString() - Method in class org.springframework.security.web.header.Header
toString() - Method in class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter
toString() - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
toString() - Method in class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter
toString() - Method in class org.springframework.security.web.header.writers.FeaturePolicyHeaderWriter
toString() - Method in class org.springframework.security.web.header.writers.PermissionsPolicyHeaderWriter
toString() - Method in class org.springframework.security.web.header.writers.StaticHeadersWriter
toString() - Method in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
toString() - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter
toString() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest
toString() - Method in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
toString() - Method in class org.springframework.security.web.server.ui.DefaultResourcesWebFilter
toString() - Method in class org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.server.util.matcher.IpAddressServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.server.util.matcher.NegatedServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.server.util.matcher.OrServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher
toString() - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher
toString() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper
toString() - Method in class org.springframework.security.web.util.matcher.AndRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.DispatcherTypeRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.ELRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.NegatedRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.OrRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.RegexRequestMatcher
toString() - Method in class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher
toString() - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
toString() - Method in class org.springframework.security.web.webauthn.api.Bytes
toString() - Method in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
transform(HttpServletRequest) - Method in interface org.springframework.security.web.access.AuthorizationManagerWebInvocationPrivilegeEvaluator.HttpServletRequestTransformer
  Return the `HttpServletRequest` that is passed into the `AuthorizationManager`
transform(HttpServletRequest) - Method in class org.springframework.security.web.access.HandlerMappingIntrospectorRequestTransformer
transports(List<AuthenticatorTransport>) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder
  Sets the `AuthenticatorAttestationResponse.getTransports()` property.
transports(Set<AuthenticatorTransport>) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
transports(Set<AuthenticatorTransport>) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder
  Sets the `PublicKeyCredentialDescriptor.getTransports()` property.
transports(AuthenticatorTransport...) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAttestationResponse.AuthenticatorAttestationResponseBuilder
  Sets the `AuthenticatorAttestationResponse.getTransports()` property.
transports(AuthenticatorTransport...) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder
  Sets the `PublicKeyCredentialDescriptor.getTransports()` property.
TWO_WEEKS_S - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
type(PublicKeyCredentialType) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredential.PublicKeyCredentialBuilder
  Sets the `PublicKeyCredential.getType()` property.
type(PublicKeyCredentialType) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialDescriptor.PublicKeyCredentialDescriptorBuilder
  Sets the `PublicKeyCredentialDescriptor.getType()` property.

## U

UNLIMITED - Static variable in interface org.springframework.security.web.server.authentication.SessionLimit
  Represents unlimited sessions.
UNSAFE_NONE - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
UNSAFE_NONE - Enum constant in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
UNSAFE_NONE - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
UNSAFE_NONE - Enum constant in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
UNSAFE_URL - Enum constant in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
UNSAFE_URL - Enum constant in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
unsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
  Default behaviour for unsuccessful authentication.
unsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter
  Ensures the authentication object in the secure context is set to null when authentication fails.
updateToken(String, String, Date) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl
updateToken(String, String, Date) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl
updateToken(String, String, Date) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository
UrlUtils - Class in org.springframework.security.web.util
  Provides static methods for composing URLs.
USB - Static variable in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  usbc indicates the respective authenticator can be contacted over removable USB.
user(PublicKeyCredentialUserEntity) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialCreationOptions.PublicKeyCredentialCreationOptionsBuilder
  Sets the `PublicKeyCredentialCreationOptions.getUser()` property.
USER_VERIFICATION_OPTIONAL - Enum constant in enum class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy
USER_VERIFICATION_OPTIONAL_WITH_CREDENTIAL_ID_LIST - Enum constant in enum class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy
USER_VERIFICATION_REQUIRED - Enum constant in enum class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy
UserCredentialRepository - Interface in org.springframework.security.web.webauthn.management
  A repository for managing `CredentialRecord`s associated to a user.
userEntityUserId(Bytes) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder
userHandle(Bytes) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorAssertionResponse.AuthenticatorAssertionResponseBuilder
  Set the `AuthenticatorAssertionResponse.getUserHandle()` property
UsernamePasswordAuthenticationFilter - Class in org.springframework.security.web.authentication
  Processes an authentication form submission.
UsernamePasswordAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
UsernamePasswordAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter
userVerification(UserVerificationRequirement) - Method in class org.springframework.security.web.webauthn.api.AuthenticatorSelectionCriteria.AuthenticatorSelectionCriteriaBuilder
  Sets the `AuthenticatorSelectionCriteria.getUserVerification()` property.
userVerification(UserVerificationRequirement) - Method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialRequestOptions.PublicKeyCredentialRequestOptionsBuilder
  Sets the `PublicKeyCredentialRequestOptions.getUserVerification()` property.
UserVerificationRequirement - Class in org.springframework.security.web.webauthn.api
  UserVerificationRequirement is used by the Relying Party to indicate if user verification is needed.
uvInitialized(boolean) - Method in class org.springframework.security.web.webauthn.api.ImmutableCredentialRecord.ImmutableCredentialRecordBuilder

## V

validate(FilterChainProxy) - Method in interface org.springframework.security.web.FilterChainProxy.FilterChainValidator
valueOf(String) - Static method in enum class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.RememberMeTokenAlgorithm
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in class org.springframework.security.web.webauthn.api.AttestationConveyancePreference
  Gets an instance of `AttestationConveyancePreference`
valueOf(String) - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
  Gets an instance of `AuthenticatorAttachment` based upon the value passed in.
valueOf(String) - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
  Gets an instance of `AuthenticatorTransport`.
valueOf(String) - Static method in enum class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy
  Returns the enum constant of this class with the specified name.
valueOf(String) - Static method in class org.springframework.security.web.webauthn.api.PublicKeyCredentialType
valueOf(String) - Static method in class org.springframework.security.web.webauthn.api.ResidentKeyRequirement
values() - Static method in enum class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices.RememberMeTokenAlgorithm
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter.Directive
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter.CrossOriginEmbedderPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter.CrossOriginOpenerPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter.CrossOriginResourcePolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter.HeaderValue
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter.Directive
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter.CrossOriginEmbedderPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter.CrossOriginOpenerPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter.CrossOriginResourcePolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in enum class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter.HeaderValue
  Returns an array containing the constants of this enum class, in the order they are declared.
values() - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorAttachment
values() - Static method in class org.springframework.security.web.webauthn.api.AuthenticatorTransport
values() - Static method in class org.springframework.security.web.webauthn.api.COSEAlgorithmIdentifier
values() - Static method in enum class org.springframework.security.web.webauthn.api.CredProtectAuthenticationExtensionsClientInput.CredProtect.ProtectionPolicy
  Returns an array containing the constants of this enum class, in the order they are declared.
verifyThrowableHierarchy(Throwable, Class<? extends Throwable>) - Static method in class org.springframework.security.web.util.ThrowableAnalyzer
  Verifies that the provided throwable is a valid subclass of the provided type (or of the type itself).
VirtualFilterChainDecorator() - Constructor for class org.springframework.security.web.FilterChainProxy.VirtualFilterChainDecorator
vote(Authentication, FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter
  Deprecated.

## W

WEB_INVOCATION_PRIVILEGE_EVALUATOR_ATTRIBUTE - Static variable in class org.springframework.security.web.WebAttributes
  Set as a request attribute to override the default `WebInvocationPrivilegeEvaluator`
WebAsyncManagerIntegrationFilter - Class in org.springframework.security.web.context.request.async
  Provides integration between the `SecurityContext` and Spring Web's `WebAsyncManager` by using the `SecurityContextCallableProcessingInterceptor.beforeConcurrentHandling(org.springframework.web.context.request.NativeWebRequest, Callable)` to populate the `SecurityContext` on the `Callable`.
WebAsyncManagerIntegrationFilter() - Constructor for class org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter
WebAttributes - Class in org.springframework.security.web
  Well-known keys which are used to store Spring Security information in request or session scope.
WebAuthenticationDetails - Class in org.springframework.security.web.authentication
  A holder of selected HTTP details related to a web authentication request.
WebAuthenticationDetails(HttpServletRequest) - Constructor for class org.springframework.security.web.authentication.WebAuthenticationDetails
  Records the remote address and will also set the session Id if a session already exists (it won't create one).
WebAuthenticationDetails(String, String) - Constructor for class org.springframework.security.web.authentication.WebAuthenticationDetails
  Constructor to add Jackson2 serialize/deserialize support
WebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication
  Implementation of `AuthenticationDetailsSource` which builds the details object from an `HttpServletRequest` object, creating a `WebAuthenticationDetails` .
WebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.WebAuthenticationDetailsSource
webauthn() - Static method in class org.springframework.security.web.authentication.ui.DefaultResourcesFilter
  Create an instance of `DefaultResourcesFilter` serving Spring Security's default webauthn javascript.
Webauthn4JRelyingPartyOperations - Class in org.springframework.security.web.webauthn.management
  A WebAuthn4j implementation of `WebAuthnRelyingPartyOperations`.
Webauthn4JRelyingPartyOperations(PublicKeyCredentialUserEntityRepository, UserCredentialRepository, PublicKeyCredentialRpEntity, Set<String>) - Constructor for class org.springframework.security.web.webauthn.management.Webauthn4JRelyingPartyOperations
  Creates a new instance.
WebAuthnAuthentication - Class in org.springframework.security.web.webauthn.authentication
  A `WebAuthnAuthentication` is used to represent successful authentication with WebAuthn.
WebAuthnAuthentication(PublicKeyCredentialUserEntity, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.web.webauthn.authentication.WebAuthnAuthentication
WebAuthnAuthenticationFilter - Class in org.springframework.security.web.webauthn.authentication
  Authenticates `PublicKeyCredential<AuthenticatorAssertionResponse>` that is parsed from the body of the `HttpServletRequest` using the `WebAuthnAuthenticationFilter.setConverter(GenericHttpMessageConverter)`.
WebAuthnAuthenticationFilter() - Constructor for class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationFilter
WebAuthnAuthenticationProvider - Class in org.springframework.security.web.webauthn.authentication
  An `AuthenticationProvider` that uses `WebAuthnRelyingPartyOperations` for authentication using an `WebAuthnAuthenticationRequestToken`.
WebAuthnAuthenticationProvider(WebAuthnRelyingPartyOperations, UserDetailsService) - Constructor for class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationProvider
  Creates a new instance.
WebAuthnAuthenticationRequestToken - Class in org.springframework.security.web.webauthn.authentication
  An `Authentication` used in `WebAuthnAuthenticationProvider` for authenticating via WebAuthn.
WebAuthnAuthenticationRequestToken(RelyingPartyAuthenticationRequest) - Constructor for class org.springframework.security.web.webauthn.authentication.WebAuthnAuthenticationRequestToken
  Creates a new instance.
WebauthnJackson2Module - Class in org.springframework.security.web.webauthn.jackson
  Adds Jackson support for Spring Security WebAuthn.
WebauthnJackson2Module() - Constructor for class org.springframework.security.web.webauthn.jackson.WebauthnJackson2Module
  Creates a new instance.
WebAuthnRegistrationFilter - Class in org.springframework.security.web.webauthn.registration
  Authenticates `PublicKeyCredential<AuthenticatorAssertionResponse>` that is parsed from the body of the `HttpServletRequest` using the `WebAuthnRegistrationFilter.setConverter(HttpMessageConverter)`.
WebAuthnRegistrationFilter(UserCredentialRepository, WebAuthnRelyingPartyOperations) - Constructor for class org.springframework.security.web.webauthn.registration.WebAuthnRegistrationFilter
WebAuthnRegistrationFilter.SuccessfulUserRegistrationResponse - Class in org.springframework.security.web.webauthn.registration
WebAuthnRelyingPartyOperations - Interface in org.springframework.security.web.webauthn.management
  An API for WebAuthn Relying Party Operations
WebExpressionAuthorizationManager - Class in org.springframework.security.web.access.expression
  An expression-based `AuthorizationManager` that determines the access by evaluating the provided expression.
WebExpressionAuthorizationManager(String) - Constructor for class org.springframework.security.web.access.expression.WebExpressionAuthorizationManager
  Creates an instance.
WebExpressionVoter - Class in org.springframework.security.web.access.expression
  Deprecated.
  Use `WebExpressionAuthorizationManager` instead
WebExpressionVoter() - Constructor for class org.springframework.security.web.access.expression.WebExpressionVoter
  Deprecated.
WebFilterChainProxy - Class in org.springframework.security.web.server
  Used to delegate to a List of `SecurityWebFilterChain` instances.
WebFilterChainProxy(List<SecurityWebFilterChain>) - Constructor for class org.springframework.security.web.server.WebFilterChainProxy
WebFilterChainProxy(SecurityWebFilterChain...) - Constructor for class org.springframework.security.web.server.WebFilterChainProxy
WebFilterChainProxy.DefaultWebFilterChainDecorator - Class in org.springframework.security.web.server
  A `WebFilterChainProxy.WebFilterChainDecorator` that uses the `DefaultWebFilterChain`
WebFilterChainProxy.WebFilterChainDecorator - Interface in org.springframework.security.web.server
  A strategy for decorating the provided filter chain with one that accounts for the `SecurityFilterChain` for a given request.
WebFilterChainServerAuthenticationSuccessHandler - Class in org.springframework.security.web.server.authentication
  Success handler that continues the filter chain after authentication success.
WebFilterChainServerAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.server.authentication.WebFilterChainServerAuthenticationSuccessHandler
WebFilterExchange - Class in org.springframework.security.web.server
  A composite of the `ServerWebExchange` and the `WebFilterChain`.
WebFilterExchange(ServerWebExchange, WebFilterChain) - Constructor for class org.springframework.security.web.server.WebFilterExchange
WebInvocationPrivilegeEvaluator - Interface in org.springframework.security.web.access
  Allows users to determine whether they have privileges for a given web URI.
WebJackson2Module - Class in org.springframework.security.web.jackson2
  Jackson module for spring-security-web.
WebJackson2Module() - Constructor for class org.springframework.security.web.jackson2.WebJackson2Module
WebSecurityExpressionRoot - Class in org.springframework.security.web.access.expression
WebSecurityExpressionRoot(Supplier<Authentication>, HttpServletRequest) - Constructor for class org.springframework.security.web.access.expression.WebSecurityExpressionRoot
  Creates an instance for the given `Supplier` of the `Authentication` and `HttpServletRequest`.
WebSecurityExpressionRoot(Authentication, FilterInvocation) - Constructor for class org.springframework.security.web.access.expression.WebSecurityExpressionRoot
WebServerJackson2Module - Class in org.springframework.security.web.server.jackson2
  Jackson module for spring-security-web-flux.
WebServerJackson2Module() - Constructor for class org.springframework.security.web.server.jackson2.WebServerJackson2Module
WebServletJackson2Module - Class in org.springframework.security.web.jackson2
  Jackson module for spring-security-web related to servlet.
WebServletJackson2Module() - Constructor for class org.springframework.security.web.jackson2.WebServletJackson2Module
WebSessionServerCsrfTokenRepository - Class in org.springframework.security.web.server.csrf
  A `ServerCsrfTokenRepository` that stores the `CsrfToken` in the `HttpSession`.
WebSessionServerCsrfTokenRepository() - Constructor for class org.springframework.security.web.server.csrf.WebSessionServerCsrfTokenRepository
WebSessionServerLogoutHandler - Class in org.springframework.security.web.server.authentication.logout
  A `ServerLogoutHandler` which invalidates the active `WebSession`.
WebSessionServerLogoutHandler() - Constructor for class org.springframework.security.web.server.authentication.logout.WebSessionServerLogoutHandler
WebSessionServerRequestCache - Class in org.springframework.security.web.server.savedrequest
  An implementation of `ServerRequestCache` that saves the `ServerHttpRequest` in the `WebSession`.
WebSessionServerRequestCache() - Constructor for class org.springframework.security.web.server.savedrequest.WebSessionServerRequestCache
WebSessionServerSecurityContextRepository - Class in org.springframework.security.web.server.context
  Stores the `SecurityContext` in the `WebSession`.
WebSessionServerSecurityContextRepository() - Constructor for class org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository
WebSpherePreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth.websphere
  This AbstractPreAuthenticatedProcessingFilter implementation is based on WebSphere authentication.
WebSpherePreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter
  Public constructor which overrides the default AuthenticationDetails class to be used.
WebSpherePreAuthenticatedWebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication.preauth.websphere
  This AuthenticationDetailsSource implementation will set the pre-authenticated granted authorities based on the WebSphere groups for the current WebSphere user, mapped using the configured Attributes2GrantedAuthoritiesMapper.
WebSpherePreAuthenticatedWebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource
WebSpherePreAuthenticatedWebAuthenticationDetailsSource(WASUsernameAndGroupsExtractor) - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource
WebXmlMappableAttributesRetriever - Class in org.springframework.security.web.authentication.preauth.j2ee
  This `MappableAttributesRetriever` implementation reads the list of defined J2EE roles from a `web.xml` file and returns these from { `WebXmlMappableAttributesRetriever.getMappableAttributes()`.
WebXmlMappableAttributesRetriever() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever
WhiteListedAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
WhiteListedAllowFromStrategy(Collection<String>) - Constructor for class org.springframework.security.web.header.writers.frameoptions.WhiteListedAllowFromStrategy
  Deprecated.
  Creates a new instance
withHttpOnlyFalse() - Static method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository
  Factory method to conveniently create an instance that creates cookies where `Cookie.isHttpOnly()` is set to false.
withHttpOnlyFalse() - Static method in class org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository
  Factory method to conveniently create an instance that has creates cookies with `ResponseCookie.isHttpOnly()` set to false.
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.header.HeaderWriter
  Create a `Header` instance.
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CacheControlHeadersWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.ClearSiteDataHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CompositeHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CrossOriginEmbedderPolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CrossOriginOpenerPolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CrossOriginResourcePolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.FeaturePolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter
  Writes the X-Frame-Options header value, overwritting any previous value.
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter
  Deprecated.
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.PermissionsPolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.StaticHeadersWriter
writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.ClearSiteDataServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.CompositeServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.ContentSecurityPolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.CrossOriginEmbedderPolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.CrossOriginOpenerPolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.CrossOriginResourcePolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.FeaturePolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.PermissionsPolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in interface org.springframework.security.web.server.header.ServerHttpHeadersWriter
  Write the headers to the response.
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.ServerWebExchangeDelegatingServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.StaticServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.XContentTypeOptionsServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter
writeHttpHeaders(ServerWebExchange) - Method in class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter

## X

X_CONTENT_OPTIONS - Static variable in class org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter
X_CONTENT_OPTIONS - Static variable in class org.springframework.security.web.server.header.XContentTypeOptionsServerHttpHeadersWriter
X_FRAME_OPTIONS - Static variable in class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter
X_XSS_PROTECTION - Static variable in class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter
X509AuthenticationFilter - Class in org.springframework.security.web.authentication.preauth.x509
X509AuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter
X509PrincipalExtractor - Interface in org.springframework.security.web.authentication.preauth.x509
  Obtains the principal from an X509Certificate for use within the framework.
XContentTypeOptionsHeaderWriter - Class in org.springframework.security.web.header.writers
  A `StaticHeadersWriter` that inserts headers to prevent content sniffing.
XContentTypeOptionsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.XContentTypeOptionsHeaderWriter
  Creates a new instance
XContentTypeOptionsServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Adds X-Content-Type-Options: nosniff
XContentTypeOptionsServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.XContentTypeOptionsServerHttpHeadersWriter
XFRAME_OPTIONS_HEADER - Static variable in class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter
XFrameOptionsHeaderWriter - Class in org.springframework.security.web.header.writers.frameoptions
  `HeaderWriter` implementation for the X-Frame-Options headers.
XFrameOptionsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter
  Creates an instance with `XFrameOptionsHeaderWriter.XFrameOptionsMode.DENY`
XFrameOptionsHeaderWriter(AllowFromStrategy) - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter
  Deprecated.
  ALLOW-FROM is an obsolete directive that no longer works in modern browsers. Instead use Content-Security-Policy with the frame-ancestors directive.
XFrameOptionsHeaderWriter(XFrameOptionsHeaderWriter.XFrameOptionsMode) - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter
  Creates a new instance
XFrameOptionsHeaderWriter.XFrameOptionsMode - Enum Class in org.springframework.security.web.header.writers.frameoptions
  The possible values for the X-Frame-Options header.
XFrameOptionsServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  `ServerHttpHeadersWriter` implementation for the X-Frame-Options headers.
XFrameOptionsServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter
XFrameOptionsServerHttpHeadersWriter.Mode - Enum Class in org.springframework.security.web.server.header
  The X-Frame-Options values.
XorCsrfTokenRequestAttributeHandler - Class in org.springframework.security.web.csrf
  An implementation of the `CsrfTokenRequestHandler` interface that is capable of masking the value of the `CsrfToken` on each request and resolving the raw token value from the masked value as either a header or parameter value of the request.
XorCsrfTokenRequestAttributeHandler() - Constructor for class org.springframework.security.web.csrf.XorCsrfTokenRequestAttributeHandler
XorServerCsrfTokenRequestAttributeHandler - Class in org.springframework.security.web.server.csrf
  An implementation of the `ServerCsrfTokenRequestAttributeHandler` and `ServerCsrfTokenRequestResolver` interfaces that is capable of masking the value of the `CsrfToken` on each request and resolving the raw token value from the masked value as either a form data value or header of the request.
XorServerCsrfTokenRequestAttributeHandler() - Constructor for class org.springframework.security.web.server.csrf.XorServerCsrfTokenRequestAttributeHandler
XXssProtectionHeaderWriter - Class in org.springframework.security.web.header.writers
  Renders the X-XSS-Protection header.
XXssProtectionHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter
  Create a new instance
XXssProtectionHeaderWriter.HeaderValue - Enum Class in org.springframework.security.web.header.writers
  The value of the x-xss-protection header.
XXssProtectionServerHttpHeadersWriter - Class in org.springframework.security.web.server.header
  Add the x-xss-protection header.
XXssProtectionServerHttpHeadersWriter() - Constructor for class org.springframework.security.web.server.header.XXssProtectionServerHttpHeadersWriter
  Creates a new instance
XXssProtectionServerHttpHeadersWriter.HeaderValue - Enum Class in org.springframework.security.web.server.header
  The value of the x-xss-protection header.

A B C D E F G H I J L M N O P R S T U V W X
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form