AccessControlType must be considered by the AccessControlAspect
which TokenExtractionMode to be used to get the tokensAccessControlType is declared with the AccessControl AnnotationSecurityContextProviderAccessControl
PUBLIC : no control should be done
ANONYMOUS : the only secretKey will be checked
PRIVATE : both secretKey and token will be checkedSecurityContextProvider based on the use of :
a SecurityContextHolder which is based on ThreadLocal
two SecurityCredentialsRetrieverSecurityCredentialsEncoder that uses an ObjectEncoderFromCryptedTokenCredentialsRetriever
We can link the token to credentials with an access to a licences repositoryAccessControl
HEADER : Token are passed through header (default mode)
COOKIE : Token are given by cookies (useful for images to be displayed in html)TokenExtractorFactoryTokenExtractionModeCopyright © 2018. All rights reserved.