spring-projects / spring-projects/spring-security
Support the usage of bean references in Java Configuration reactive web expressions
Open
@jzheaux is already working on this.
Since Mar 31, 2022.
in: web
status: blocked
type: enhancement
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Summary
The usual Spring MVC Security allows us to reference beans in the web security expressions:
http
.authorizeRequests()
.antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
...
Currently the reactive version doesn't offer an access method with a String for web expressions, only with a ReaciveAuthorizationManager.
Actual Behavior
This is the API offered by pathMatchers
.authorizeExchange()
.pathMatchers("").access( ReaciveAuthorizationManager ... )
Expected Behavior
Possibility of configuring a security web expression:
http
.authorizeExchange()
.antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
...
Configuration
...
Version
5.2.0.RC1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.