Authorization

Spring Security 为 authorization提供全面的支持。授权是确定谁有权访问特定资源。Spring Security 通过允许基于请求的授权和基于方法的授权来提供 defense in depth。

Spring Security provides comprehensive support for authorization. Authorization is determining who is allowed to access a particular resource. Spring Security provides defense in depth by allowing for request based authorization and method based authorization.

Request Based Authorization

Spring Security 为 Servlet和 WebFlux环境都提供基于请求的授权。

Spring Security provides authorization based upon the request for both Servlet and WebFlux environments.

Method Based Authorization

Spring Security 为 Servlet和 WebFlux环境都提供基于方法调用的授权。

Spring Security provides authorization based on the method invocation for both Servlet and WebFlux environments.