-
Notifications
You must be signed in to change notification settings - Fork 5.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support Expressions in Method Authorization Denied Handlers #14857
Labels
Comments
marcusdacoregio
added
in: core
An issue in spring-security-core
type: enhancement
A general enhancement
labels
Apr 5, 2024
marcusdacoregio
changed the title
Support Expressions in Method Authorization Handlers
Support Expressions in Method Authorization Denied Handlers
Apr 9, 2024
CrazyParanoid
pushed a commit
to CrazyParanoid/spring-security
that referenced
this issue
Apr 15, 2024
CrazyParanoid
pushed a commit
to CrazyParanoid/spring-security
that referenced
this issue
Apr 15, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
We should consider supporting expressions in method authorization handlers for simple setups. Currently, if you want to handle authorization denied and map the return value to
null
, you must create aMethodAuthorizationDeniedHandler/PostProcessor
class and expose it as a bean:That is a little bit too complicated to just return null. A simpler setup could be:
Related:
The text was updated successfully, but these errors were encountered: