From 7537aa5124e4f6d74820449311e50da6ade10f16 Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Mon, 20 Sep 2021 16:51:01 -0500 Subject: [PATCH] Add generic authorization page --- .../ROOT/pages/features/authorization/index.adoc | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 docs/modules/ROOT/pages/features/authorization/index.adoc diff --git a/docs/modules/ROOT/pages/features/authorization/index.adoc b/docs/modules/ROOT/pages/features/authorization/index.adoc new file mode 100644 index 0000000000..d3c1d39328 --- /dev/null +++ b/docs/modules/ROOT/pages/features/authorization/index.adoc @@ -0,0 +1,14 @@ +[[authorization]] += Authorization + +Spring Security provides comprehensive support for https://en.wikipedia.org/wiki/Authorization[authorization]. +Authorization is determining who is allowed to access a particular resource. +Spring Security provides https://en.wikipedia.org/wiki/Defense_in_depth_(computing)[defense in depth] by allowing for request based authorization and method based authorization. + +[[authorization-request]] +== Request Based Authorization + +Spring Security provides authorization based upon the request for both xref:servlet/authorization/index.adoc[Servlet] and WebFlux environments. + +[[authorization-method]] +== Method Based Authorization