All geek questions in one place

How to use the path variable in @Preauthorize

I have a situation where I need to pass a path variable as an argument in preauthorize

@RequestMapping(value="/page/{cmd}", method = RequestMethod.GET) @PreAuthorize("hasRole(#cmd)") public void method(@PathVariable String cmd, HttpServletRequest request, HttpServletResponse response){ // my stuff }

This does not work. Can anyone suggest me how to use the path variable in preauthorization.

+6
source share
1 answer

Spring Security @PreAuthorize used to authorize access to methods. He knows little about Spring MVC, in particular about its @RequestMapping annotation.

Names like #cmd will refer to the method parameters, and your cmd parameter is zero. Change it to:

 @PathVariable("cmd") String cmd

Thus, the cmd path variable will be bound to the parameter of the cmd method, which will then be bound to #cmd in @PreAuthorize .

+2
source

Source: https://habr.com/ru/post/950069/

More articles:


All Articles