Package org.springframework.security.oauth2.server.resource.web.access.server

Class BearerTokenServerAccessDeniedHandler

  • All Implemented Interfaces:
    org.springframework.security.web.server.authorization.ServerAccessDeniedHandler
    public class BearerTokenServerAccessDeniedHandler
extends java.lang.Object
implements org.springframework.security.web.server.authorization.ServerAccessDeniedHandler
    Translates any AccessDeniedException into an HTTP response in accordance with RFC 6750 Section 3: The WWW-Authenticate. So long as the class can prove that the request has a valid OAuth 2.0 Authentication, then will return an insufficient scope error; otherwise, it will simply indicate the scheme (Bearer) and any configured realm.
    Since:
    5.1

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      reactor.core.publisher.Mono<java.lang.Void> handle​(org.springframework.web.server.ServerWebExchange exchange, org.springframework.security.access.AccessDeniedException denied)  
      void setRealmName​(java.lang.String realmName)
      Set the default realm name to use in the bearer token error response

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • BearerTokenServerAccessDeniedHandler

        public BearerTokenServerAccessDeniedHandler()

    • Method Detail

      • handle

        public reactor.core.publisher.Mono<java.lang.Void> handle​(org.springframework.web.server.ServerWebExchange exchange,
                                                          org.springframework.security.access.AccessDeniedException denied)
        Specified by:
        handle in interface org.springframework.security.web.server.authorization.ServerAccessDeniedHandler

      • setRealmName

        public final void setRealmName​(java.lang.String realmName)
        Set the default realm name to use in the bearer token error response
        Parameters:
        realmName -