Skip to content

Commit 9b3f834

Browse files
Merge branch '5.6.x' into 5.7.x
Closes gh-12285
2 parents 621889f + 70bfc39 commit 9b3f834

File tree

3 files changed

+3
-5
lines changed

3 files changed

+3
-5
lines changed
Binary file not shown.
Loading

docs/modules/ROOT/pages/servlet/authorization/authorize-http-requests.adoc

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -48,12 +48,10 @@ image::{figures}/authorizationfilter.png[]
4848

4949
* image:{icondir}/number_1.png[] First, the `AuthorizationFilter` obtains an xref:servlet/authentication/architecture.adoc#servlet-authentication-authentication[Authentication] from the xref:servlet/authentication/architecture.adoc#servlet-authentication-securitycontextholder[SecurityContextHolder].
5050
It wraps this in an `Supplier` in order to delay lookup.
51-
* image:{icondir}/number_2.png[] Second, `AuthorizationFilter` creates a {security-api-url}org/springframework/security/web/FilterInvocation.html[`FilterInvocation`] from the `HttpServletRequest`, `HttpServletResponse`, and `FilterChain`.
52-
// FIXME: link to FilterInvocation
53-
* image:{icondir}/number_3.png[] Next, it passes the `Supplier<Authentication>` and `FilterInvocation` to the xref:servlet/architecture.adoc#authz-authorization-manager[`AuthorizationManager`].
54-
** image:{icondir}/number_4.png[] If authorization is denied, an `AccessDeniedException` is thrown.
51+
* image:{icondir}/number_2.png[] Second, it passes the `Supplier<Authentication>` and the `HttpServletRequest` to the xref:servlet/architecture.adoc#authz-authorization-manager[`AuthorizationManager`].
52+
** image:{icondir}/number_3.png[] If authorization is denied, an `AccessDeniedException` is thrown.
5553
In this case the xref:servlet/architecture.adoc#servlet-exceptiontranslationfilter[`ExceptionTranslationFilter`] handles the `AccessDeniedException`.
56-
** image:{icondir}/number_5.png[] If access is granted, `AuthorizationFilter` continues with the xref:servlet/architecture.adoc#servlet-filters-review[FilterChain] which allows the application to process normally.
54+
** image:{icondir}/number_4.png[] If access is granted, `AuthorizationFilter` continues with the xref:servlet/architecture.adoc#servlet-filters-review[FilterChain] which allows the application to process normally.
5755

5856
We can configure Spring Security to have different rules by adding more rules in order of precedence.
5957

0 commit comments

Comments
 (0)