Spring Security in Action

16 Global method security: Pre- and postauthorizations

This chapter covers

• Global method security in Spring applications

• Preauthorization of methods based on authorities, roles, and permissions

• Postauthorization of methods based on authorities, roles, and permissions

Up to now, we discussed various ways of configuring authentication. We started with the most straightforward approach, HTTP Basic, in chapter 2, and then I showed you how to set form login in chapter 5. We covered OAuth 2 in chapters 12 through 15. But in terms of authorization, we only discussed configuration at the endpoint level. Suppose your app is not a web application--can’t you use Spring Security for authentication and authorization as well? Spring Security is a ...