Package com.vaadin.flow.spring.security

Class SpringAccessPathChecker

java.lang.Object

com.vaadin.flow.spring.security.SpringAccessPathChecker

All Implemented Interfaces:

AccessPathChecker, Serializable

public class SpringAccessPathChecker
extends Object
implements AccessPathChecker

A Spring specific route path access checker that delegates the check to Spring Security.

It is used in combination with RoutePathAccessChecker to provide path-based security to Flow NavigationAccessControl.

To enable it, define a NavigationAccessControlConfigurer bean, configured using NavigationAccessControlConfigurer.withRoutePathAccessChecker() method.

 
 @Bean
 NavigationAccessControlConfigurer navigationAccessControlConfigurer() {
     return new NavigationAccessControlConfigurer()
             .withRoutePathAccessChecker().withLoginView(LoginView.class);
 }
 
 

See Also:

• Serialized Form

Constructor Summary

Constructors

Constructor	Description
SpringAccessPathChecker(org.springframework.security.web.access.WebInvocationPrivilegeEvaluator evaluator)	Creates a new instance that uses the given WebInvocationPrivilegeEvaluator to check path permissions.
SpringAccessPathChecker(org.springframework.security.web.access.WebInvocationPrivilegeEvaluator evaluator, String urlMapping)	Creates a new instance that uses the given WebInvocationPrivilegeEvaluator to check path permissions.

Method Summary

Modifier and Type	Method	Description
boolean	hasAccess(String path, Principal principal, Predicate<String> roleChecker)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SpringAccessPathChecker

public SpringAccessPathChecker(org.springframework.security.web.access.WebInvocationPrivilegeEvaluator evaluator)

Creates a new instance that uses the given WebInvocationPrivilegeEvaluator to check path permissions.

Parameters:

evaluator - evaluator to check path permissions.

SpringAccessPathChecker

public SpringAccessPathChecker(org.springframework.security.web.access.WebInvocationPrivilegeEvaluator evaluator,
 String urlMapping)

Creates a new instance that uses the given WebInvocationPrivilegeEvaluator to check path permissions. It applies the given Vaadin servlet url mapping to the input path before delegating the check to the evaluator.

Parameters:

evaluator - evaluator to check path permissions.

urlMapping - Vaadin servlet url mapping

Method Details

hasAccess

public boolean hasAccess(String path,
 Principal principal,
 Predicate<String> roleChecker)

Specified by:

hasAccess in interface AccessPathChecker