spring-projects / spring-projects/spring-security
Allow method attribute for authorize tag to be a runtime expression value
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
In spring-security/taglibs/src/main/resources/META-INF/security.tld, the authorize tag has the attribute method.
This method has rtexprvalue set to false.
It would be helpful if this were set to true so that I can pass the value in at runtime. For example, I want to use this tag inside my own custom tag, and allow the method to be passed into that. Therefore, it is not convenient to hard code it.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open spring-security/taglibs/src/main/resources/META-INF/security.tld at the authorize tag declaration around line 63 and inspect the method attribute. Confirm its current rtexprvalue setting and update the tag descriptor so runtime values are accepted. Done means the method attribute can be supplied dynamically, including through a custom tag; check any taglib tests or validation available for this descriptor.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- security
- Issue type
- Feature
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100