Class AuthorizeHttpRequestsConfigurer

java.lang.Object

com.codename1.backend.security.SecurityConfigurer

com.codename1.backend.security.AuthorizeHttpRequestsConfigurer

public final class AuthorizeHttpRequestsConfigurer
extends SecurityConfigurer

The authorization rules of a chain: which requests need what.

http.authorizeHttpRequests(auth -> auth
        .requestMatchers("/", "/css/**").permitAll()
        .requestMatchers("/admin/**").hasRole("ADMIN")
        .requestMatchers(AntPathRequestMatcher.antMatcher("DELETE", "/api/**"))
                .hasAuthority("api:delete")
        .anyRequest().authenticated());

The rules are asked in the order they are written and the first that matches decides. A request no rule matches is denied.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
final class	AuthorizeHttpRequestsConfigurer.AuthorizationManagerRequestMatcherRegistry	Where rules are added: pick the requests, then say what they need.
final class	AuthorizeHttpRequestsConfigurer.AuthorizedUrl	What the chosen requests need.

Method Summary

Modifier and Type	Method	Description
void	configure(HttpSecurity http)	Adds this part's filters; nothing by default.
AuthorizeHttpRequestsConfigurer.AuthorizationManagerRequestMatcherRegistry	getRegistry()	The rules, to add to.

Methods inherited from class SecurityConfigurer

disable, getBuilder, init

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

getRegistry

public AuthorizeHttpRequestsConfigurer.AuthorizationManagerRequestMatcherRegistry getRegistry()

The rules, to add to.

configure

public void configure(HttpSecurity http)

Description copied from class: SecurityConfigurer

Adds this part's filters; nothing by default.

Overrides:

configure in class SecurityConfigurer