Package org.springframework.security.messaging.handler.invocation.reactive

Class CurrentSecurityContextArgumentResolver

java.lang.Object
org.springframework.security.messaging.handler.invocation.reactive.CurrentSecurityContextArgumentResolver
All Implemented Interfaces:
org.springframework.messaging.handler.invocation.reactive.HandlerMethodArgumentResolver
public class CurrentSecurityContextArgumentResolver extends Object implements org.springframework.messaging.handler.invocation.reactive.HandlerMethodArgumentResolver
Allows resolving the Authentication.getPrincipal() using the CurrentSecurityContext annotation. For example, the following Controller: 
 @Controller
 public class MyController {
     @MessageMapping("/im")
     public void im(@CurrentSecurityContext SecurityContext context) {
         // do something with context
     }
 }

Will resolve the SecurityContext argument using the ReactiveSecurityContextHolder. If the SecurityContext is empty, it will return null. If the types do not match, null will be returned unless CurrentSecurityContext.errorOnInvalidType() is true in which case a ClassCastException will be thrown.

Alternatively, users can create a custom meta annotation as shown below: 

 @Target({ ElementType.PARAMETER })
 @Retention(RetentionPolicy.RUNTIME)
 @CurrentSecurityContext(expression = "authentication?.principal")
 public @interface CurrentUser {
 }

The custom annotation can then be used instead. For example: 

 @Controller
 public class MyController {
     @MessageMapping("/im")
     public void im(@CurrentUser CustomUser customUser) {
         // do something with CustomUser
     }
 }
Since:
5.2

  • Constructor Summary

    Constructors
    Constructor
    Description
    CurrentSecurityContextArgumentResolver()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    reactor.core.publisher.Mono<Object>
    resolveArgument(org.springframework.core.MethodParameter parameter, org.springframework.messaging.Message<?> message)
     
    void
    setAdapterRegistry(org.springframework.core.ReactiveAdapterRegistry adapterRegistry)
    Sets the ReactiveAdapterRegistry to be used.
    void
    setBeanResolver(org.springframework.expression.BeanResolver beanResolver)
    Sets the BeanResolver to be used on the expressions
    void
    setTemplateDefaults(org.springframework.security.core.annotation.AnnotationTemplateExpressionDefaults templateDefaults)
    Configure CurrentSecurityContext template resolution
    boolean
    supportsParameter(org.springframework.core.MethodParameter parameter)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • CurrentSecurityContextArgumentResolver

      public CurrentSecurityContextArgumentResolver()

  • Method Details

    • setBeanResolver

      public void setBeanResolver(org.springframework.expression.BeanResolver beanResolver)
      Sets the BeanResolver to be used on the expressions
      Parameters:
      beanResolver - the BeanResolver to use

    • setAdapterRegistry

      public void setAdapterRegistry(org.springframework.core.ReactiveAdapterRegistry adapterRegistry)
      Sets the ReactiveAdapterRegistry to be used.
      Parameters:
      adapterRegistry - the ReactiveAdapterRegistry to use. Cannot be null. Default is ReactiveAdapterRegistry.getSharedInstance()

    • supportsParameter

      public boolean supportsParameter(org.springframework.core.MethodParameter parameter)
      Specified by:
      supportsParameter in interface org.springframework.messaging.handler.invocation.reactive.HandlerMethodArgumentResolver

    • resolveArgument

      public reactor.core.publisher.Mono<Object> resolveArgument(org.springframework.core.MethodParameter parameter, org.springframework.messaging.Message<?> message)
      Specified by:
      resolveArgument in interface org.springframework.messaging.handler.invocation.reactive.HandlerMethodArgumentResolver

    • setTemplateDefaults

      public void setTemplateDefaults(org.springframework.security.core.annotation.AnnotationTemplateExpressionDefaults templateDefaults)
      Configure CurrentSecurityContext template resolution

      By default, this value is null, which indicates that templates should not be resolved.

      Parameters:
      templateDefaults - - whether to resolve CurrentSecurityContext templates parameters
      Since:
      6.4