spring security add additional access restrict rule as dynamic relationship between role and request uri
up vote
0
down vote
favorite
I know that spring security can do access validate by
.antMatchers("/auth").hasRole("ADMIN")
But if I want to change the config, I have to restart the server
so I wander if I can do the config in the database to config the relationship dynamically
As after I login success by a form login and got the session token
I visit the url "/auth"
I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler
spring-security
add a comment |
up vote
0
down vote
favorite
I know that spring security can do access validate by
.antMatchers("/auth").hasRole("ADMIN")
But if I want to change the config, I have to restart the server
so I wander if I can do the config in the database to config the relationship dynamically
As after I login success by a form login and got the session token
I visit the url "/auth"
I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler
spring-security
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I know that spring security can do access validate by
.antMatchers("/auth").hasRole("ADMIN")
But if I want to change the config, I have to restart the server
so I wander if I can do the config in the database to config the relationship dynamically
As after I login success by a form login and got the session token
I visit the url "/auth"
I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler
spring-security
I know that spring security can do access validate by
.antMatchers("/auth").hasRole("ADMIN")
But if I want to change the config, I have to restart the server
so I wander if I can do the config in the database to config the relationship dynamically
As after I login success by a form login and got the session token
I visit the url "/auth"
I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler
spring-security
spring-security
asked 16 hours ago
zhuochen shen
2141613
2141613
add a comment |
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203265%2fspring-security-add-additional-access-restrict-rule-as-dynamic-relationship-betw%23new-answer', 'question_page');
}
);
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password