更新有关 Spring Security 的文档和和理解

2022-09-28 17:27:37 -04:00
parent 307334f10d
commit aac1f35a91
16 changed files with 825 additions and 18 deletions
@@ -0,0 +1,14 @@
+[[authorization]]
+= Authorization
+
+Spring Security provides comprehensive support for https://en.wikipedia.org/wiki/Authorization[authorization].
+Authorization is determining who is allowed to access a particular resource.
+Spring Security provides https://en.wikipedia.org/wiki/Defense_in_depth_(computing)[defense in depth] by allowing for request based authorization and method based authorization.
+
+[[authorization-request]]
+== Request Based Authorization
+
+Spring Security provides authorization based upon the request for both xref:servlet/authorization/index.adoc[Servlet] and WebFlux environments.
+
+[[authorization-method]]
+== Method Based Authorization