spring-security/core
Rob Winch 1608465a38
DefaultAuthorizationManagerFactory additionalAuthorization
This commit adds AuthorizationManager<T> additionalAuthorization to
DefaultAuthorizationManagerFactory which can be used for multi factor
authorization.

There is a builder that allows for creating an instance that requires
static additional authorities, but for more advanced cases users can
inject an additionalAuthorization that looks up if the user has settings
that enable additional required authorities.

The builder can later be updated to support checking that a particular
authority was granted within a specified amount of time.

Issue gh-17900
2025-09-23 15:25:26 -05:00
..
src DefaultAuthorizationManagerFactory additionalAuthorization 2025-09-23 15:25:26 -05:00
spring-security-core.gradle Add nullability to spring-security-core 2025-07-22 16:29:13 -05:00