Class UrlBasedCorsConfigurationsource

java.lang.Object
org.springframework.web.cors.UrlBasedCorsConfigurationsource
All Implemented Interfaces:
CorsConfigurationsource
public class UrlBasedCorsConfigurationsource extends Object implements CorsConfigurationsource
CorsConfigurationsource that uses URL path patterns to select the CorsConfiguration for a request.

Pattern matching can be done with a PathMatcher or with pre-parsed PathPatterns. The syntax is largely the same with the latter being more tailored for web usage and more efficient. The choice depends on the presence of a resolved string lookupPath or a parsed RequestPath with a fallback on PathMatcher but the fallback can be disabled. For more details, please see setAllowInitLookupPath(boolean).

since:
4.2
Author:
sebastien Deleuze, Rossen stoyanchev
see Also:

  • Constructor Details

    • UrlBasedCorsConfigurationsource

      public UrlBasedCorsConfigurationsource()
      Default constructor with PathPatternParser.defaultInstance.

    • UrlBasedCorsConfigurationsource

      public UrlBasedCorsConfigurationsource(PathPatternParser parser)
      Constructor with a PathPatternParser to parse patterns with.
      Parameters:
      parser - the parser to use
      since:
      5.3

  • Method Details

    • setAlwaysUseFullPath

      @Deprecated(since="5.3", forRemoval=true) public void setAlwaysUseFullPath(boolean alwaysUseFullPath)
      Deprecated, for removal: This API element is subject to removal in a future version.
      as of 5.3 in favor of using setUrlPathHelper(UrlPathHelper), if at all. For further details, please see setAllowInitLookupPath(boolean).
      shortcut to the same property on the configured UrlPathHelper.

    • setUrlDecode

      @Deprecated(since="5.3", forRemoval=true) public void setUrlDecode(boolean urlDecode)
      Deprecated, for removal: This API element is subject to removal in a future version.
      as of 5.3 in favor of using setUrlPathHelper(UrlPathHelper), if at all. For further details, please see setAllowInitLookupPath(boolean).
      shortcut to the same property on the configured UrlPathHelper.

    • setRemovesemicolonContent

      @Deprecated(since="5.3", forRemoval=true) public void setRemovesemicolonContent(boolean removesemicolonContent)
      Deprecated, for removal: This API element is subject to removal in a future version.
      as of 5.3 in favor of using setUrlPathHelper(UrlPathHelper), if at all. For further details, please see setAllowInitLookupPath(boolean).
      shortcut to the same property on the configured UrlPathHelper.

    • setUrlPathHelper

      @Deprecated(since="7.0", forRemoval=true) public void setUrlPathHelper(UrlPathHelper urlPathHelper)
      Deprecated, for removal: This API element is subject to removal in a future version.
      use of PathMatcher and UrlPathHelper is deprecated for use at runtime in web modules in favor of parsed patterns with PathPatternParser.
      Configure the UrlPathHelper to resolve the lookupPath. This may not be necessary if the lookupPath is expected to be pre-resolved or if parsed PathPatterns are used instead. For further details on that, see setAllowInitLookupPath(boolean).

      By default this is UrlPathHelper.defaultInstance.

    • setAllowInitLookupPath

      @Deprecated(since="7.0", forRemoval=true) public void setAllowInitLookupPath(boolean allowInitLookupPath)
      Deprecated, for removal: This API element is subject to removal in a future version.
      use of PathMatcher and UrlPathHelper is deprecated for use at runtime in web modules in favor of parsed patterns with PathPatternParser.
      When enabled, if there is neither a esolved string lookupPath nor a parsed RequestPath then use the configured UrlPathHelper to resolve a string lookupPath. This in turn determines use of URL pattern matching with PathMatcher or with parsed PathPatterns.

      In spring MVC, either a resolved string lookupPath or a parsed RequestPath is always available within Dispatcherservlet processing. However, in a servlet Filter such as CorsFilter that may or may not be the case.

      By default this is set to true in which case lazy lookupPath initialization is allowed. set this to false when an application is using parsed PathPatterns in which case the RequestPath can be parsed earlier via servletRequestPathFilter.

      Parameters:
      allowInitLookupPath - whether to disable lazy initialization and fail if not already resolved
      since:
      5.3

    • setPathMatcher

      @Deprecated(since="7.0", forRemoval=true) public void setPathMatcher(PathMatcher pathMatcher)
      Deprecated, for removal: This API element is subject to removal in a future version.
      use of PathMatcher and UrlPathHelper is deprecated for use at runtime in web modules in favor of parsed patterns with PathPatternParser.
      Configure a PathMatcher to use for pattern matching.

      This is an advanced property that should be used only when a customized AntPathMatcher or a custom PathMatcher is required.

      By default this is AntPathMatcher.

      Note: setting PathMatcher enforces use of string pattern matching even when a parsed RequestPath is available.

    • setCorsConfigurations

      public&nbsp;void&nbsp;setCorsConfigurations(@Nullable Map<string, CorsConfiguration>&nbsp;corsConfigurations)
      set the CORs configuration mappings.

      For pattern syntax see AntPathMatcher and PathPattern as well as class-level Javadoc for details on which one may in use. Generally the syntax is largely the same with PathPattern more tailored for web usage.

      Parameters:
      corsConfigurations - the mappings to use
      see Also:

    • registerCorsConfiguration

      public&nbsp;void&nbsp;registerCorsConfiguration(string&nbsp;pattern, CorsConfiguration&nbsp;config)
      Variant of setCorsConfigurations(Map) to register one mapping at a time.
      Parameters:
      pattern - the mapping pattern
      config - the CORs configuration to use for the pattern
      see Also:

    • getCorsConfigurations

      public&nbsp;Map<string, CorsConfiguration>&nbsp;getCorsConfigurations()
      Return all configured CORs mappings.

    • getCorsConfiguration

      public&nbsp;@Nullable CorsConfiguration&nbsp;getCorsConfiguration(jakarta.servlet.http.HttpservletRequest&nbsp;request)
      Description copied from interface:&nbsp;CorsConfigurationsource
      Return a CorsConfiguration based on the incoming request.
      specified by:
      getCorsConfiguration&nbsp;in interface&nbsp;CorsConfigurationsource
      Returns:
      the associated CorsConfiguration, or null if none