mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-10-31 06:38:42 +00:00
15 lines
660 B
Plaintext
15 lines
660 B
Plaintext
|
[[authorization]]
|
||
|
|
= Authorization
|
||
|
|
|
||
|
|
Spring Security provides comprehensive support for https://en.wikipedia.org/wiki/Authorization[authorization].
|
||
|
|
Authorization is determining who is allowed to access a particular resource.
|
||
|
|
Spring Security provides https://en.wikipedia.org/wiki/Defense_in_depth_(computing)[defense in depth] by allowing for request based authorization and method based authorization.
|
||
|
|
|
||
|
|
[[authorization-request]]
|
||
|
|
== Request Based Authorization
|
||
|
|
|
||
|
|
Spring Security provides authorization based upon the request for both xref:servlet/authorization/index.adoc[Servlet] and WebFlux environments.
|
||
|
|
|
||
|
|
[[authorization-method]]
|
||
|
|
== Method Based Authorization
|