diff --git a/docs/modules/ROOT/pages/features/authorization/index.adoc b/docs/modules/ROOT/pages/features/authorization/index.adoc new file mode 100644 index 0000000000..d3c1d39328 --- /dev/null +++ b/docs/modules/ROOT/pages/features/authorization/index.adoc @@ -0,0 +1,14 @@ +[[authorization]] += Authorization + +Spring Security provides comprehensive support for https://en.wikipedia.org/wiki/Authorization[authorization]. +Authorization is determining who is allowed to access a particular resource. +Spring Security provides https://en.wikipedia.org/wiki/Defense_in_depth_(computing)[defense in depth] by allowing for request based authorization and method based authorization. + +[[authorization-request]] +== Request Based Authorization + +Spring Security provides authorization based upon the request for both xref:servlet/authorization/index.adoc[Servlet] and WebFlux environments. + +[[authorization-method]] +== Method Based Authorization