Package com.elitesland.ystdms.sys.security

Class MetadataApiAuthorizationManager

java.lang.Object
com.elitesland.ystdms.sys.security.MetadataApiAuthorizationManager
All Implemented Interfaces:
org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext>
@Component @ConditionalOnBean(ApiAccessClient.class) @ConditionalOnProperty(prefix="elitesland.security.abac", name="api-authorization-enabled", havingValue="true") public class MetadataApiAuthorizationManager extends Object implements org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext>
基于 newsys-core 元数据（sys_data_permission_resource + sys_role_permission）的接口鉴权。

  • Constructor Summary

    Constructors
    Constructor
    Description
    MetadataApiAuthorizationManager()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    @Nullable org.springframework.security.authorization.AuthorizationDecision
    check(Supplier<org.springframework.security.core.Authentication> authentication, org.springframework.security.web.access.intercept.RequestAuthorizationContext object)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    Methods inherited from interface org.springframework.security.authorization.AuthorizationManager

    authorize, verify

  • Constructor Details

    • MetadataApiAuthorizationManager

      public MetadataApiAuthorizationManager()

  • Method Details

    • check

      public @Nullable org.springframework.security.authorization.AuthorizationDecision check(Supplier<org.springframework.security.core.Authentication> authentication, org.springframework.security.web.access.intercept.RequestAuthorizationContext object)
      Specified by:
      check in interface org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext>