It's helpful to know why a security decision was made.
AuthorityReactiveAuthorizationManager and AuthorityAuthorizationManager could do this by constructing an AuthorityAuthorizationDecision:
public class AuthorityAuthorizationManager implements AuthorizationManager {
// ...
public static class AuthorityAuthorizationDecision extends AuthorizationDecision {
private Collection<GrantedAuthority> authorities;
public AuthorityAuthorizationDecision(boolean decision, GrantedAuthority... authorities) {
super(decision);
// ...
}
public Collection<GrantedAuthority> getAuthorities() {
return this.authorities;
}
}
}Likewise with AuthenticatedReactiveAuthorizationManager, AuthenticatedAuthorizationManager and AuthenticatedAuthorizationDecision.
Each implementation would likely need to override toString to assist with logging authorization events.
It's helpful to know why a security decision was made.
AuthorityReactiveAuthorizationManagerandAuthorityAuthorizationManagercould do this by constructing anAuthorityAuthorizationDecision:Likewise with
AuthenticatedReactiveAuthorizationManager,AuthenticatedAuthorizationManagerandAuthenticatedAuthorizationDecision.Each implementation would likely need to override
toStringto assist with logging authorization events.