Add support AuthorizationResult for AuthorizationManager

Added a new authorization method to AuthorizationManager that returns AuthorizationResult. Closes spring-projectsgh-14843
CrazyParanoid · Apr 7, 2024 · 8b274c1 · 8b274c1
1 parent 79e410c
commit 8b274c1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.../org/springframework/security/authorization/method/PostAuthorizeAuthorizationManager.java b/.../org/springframework/security/authorization/method/PostAuthorizeAuthorizationManager.java
@@ -92,7 +92,7 @@ public AuthorizationResult authorize(Supplier<Authentication> authentication, Me
 		MethodSecurityExpressionHandler expressionHandler = this.registry.getExpressionHandler();
 		EvaluationContext ctx = expressionHandler.createEvaluationContext(authentication, mi.getMethodInvocation());
 		expressionHandler.setReturnObject(mi.getResult(), ctx);
-		return (AuthorizationDecision) ExpressionUtils.evaluate(attribute.getExpression(), ctx);
+		return ExpressionUtils.evaluate(attribute.getExpression(), ctx);
 	}
 
 	@Override

diff --git a/...a/org/springframework/security/authorization/method/PreAuthorizeAuthorizationManager.java b/...a/org/springframework/security/authorization/method/PreAuthorizeAuthorizationManager.java
@@ -82,7 +82,7 @@ public AuthorizationResult authorize(Supplier<Authentication> authentication, Me
 			return null;
 		}
 		EvaluationContext ctx = this.registry.getExpressionHandler().createEvaluationContext(authentication, mi);
-		return (AuthorizationDecision) ExpressionUtils.evaluate(attribute.getExpression(), ctx);
+		return ExpressionUtils.evaluate(attribute.getExpression(), ctx);
 	}
 
 	@Override