Add ConditionalAuthorizationManager

Closes gh-18919

docs/src/test/java/org/springframework/security/docs/servlet/authorization/authzconditionalauthorizationmanager/ConditionalAuthorizationManagerExample.java

@@ -0,0 +1,33 @@
+package org.springframework.security.docs.servlet.authorization.authzconditionalauthorizationmanager;
+
+import java.util.function.Predicate;
+
+import org.springframework.security.authorization.AllRequiredFactorsAuthorizationManager;
+import org.springframework.security.authorization.AuthorizationManager;
+import org.springframework.security.authorization.ConditionalAuthorizationManager;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.access.intercept.RequestAuthorizationContext;
+
+public class ConditionalAuthorizationManagerExample {
+
+	public void configure(MfaRepository mfaRepository) {
+		// tag::conditionalAuthorizationManager[]
+		Predicate<Authentication> whenUserHasMfa = (auth) -> mfaRepository.hasRegisteredMfa(auth.getName());
+		AuthorizationManager<RequestAuthorizationContext> mfaRequired = AllRequiredFactorsAuthorizationManager
+			.<RequestAuthorizationContext>builder()
+			.requireFactor((f) -> f.passwordAuthority())
+			.requireFactor((f) -> f.webauthnAuthority())
+			.build();
+		AuthorizationManager<RequestAuthorizationContext> manager = ConditionalAuthorizationManager.<RequestAuthorizationContext>when(whenUserHasMfa)
+			.whenTrue(mfaRequired)
+			.build();
+		// end::conditionalAuthorizationManager[]
+	}
+
+	interface MfaRepository {
+
+		boolean hasRegisteredMfa(String username);
+
+	}
+
+}

docs/src/test/kotlin/org/springframework/security/kt/docs/servlet/authorization/authzconditionalauthorizationmanager/ConditionalAuthorizationManagerExample.kt

@@ -0,0 +1,26 @@
+package org.springframework.security.kt.docs.servlet.authorization.authzconditionalauthorizationmanager;
+
+import org.springframework.security.authorization.AllRequiredFactorsAuthorizationManager
+import org.springframework.security.authorization.ConditionalAuthorizationManager
+import org.springframework.security.core.Authentication
+import org.springframework.security.web.access.intercept.RequestAuthorizationContext
+import java.util.function.Predicate
+
+class ConditionalAuthorizationManagerExample {
+    fun configure(mfaRepository: MfaRepository) {
+        // tag::conditionalAuthorizationManager[]
+        val whenUserHasMfa = Predicate { auth: Authentication -> mfaRepository.hasRegisteredMfa(auth.name) }
+        val mfaRequired = AllRequiredFactorsAuthorizationManager.builder<RequestAuthorizationContext>()
+            .requireFactor { f -> f.passwordAuthority() }
+            .requireFactor { f -> f.webauthnAuthority() }
+            .build()
+        val manager = ConditionalAuthorizationManager.`when`<RequestAuthorizationContext>(whenUserHasMfa)
+            .whenTrue(mfaRequired)
+            .build()
+        // end::conditionalAuthorizationManager[]
+    }
+
+    interface MfaRepository {
+        fun hasRegisteredMfa(username: String?): Boolean
+    }
+}