For the latest stable version, please use Spring Security 6.3.4!

Authorization

Spring Security provides comprehensive support for authorization. Authorization is determining who is allowed to access a particular resource. Spring Security provides defense in depth by allowing for request based authorization and method based authorization.

Request Based Authorization

Spring Security provides authorization based upon the request for both Servlet and WebFlux environments.

Method Based Authorization