denyAll

As explained in Spring Security in Action, Second Edition

denyAll is a Spring Security authorization configuration method that denies access to every request matched by a rule.

@Configuration
public class ProjectConfig {

  // Omitted code

  @Bean
  public SecurityFilterChain securityFilterChain(HttpSecurity http) 
    throws Exception {

    http.httpBasic(Customizer.withDefaults());

    http.authorizeHttpRequests(
       c -> c.anyRequest().denyAll()     
    );                                #1

    return http.basic();
  }
}

How Spring Security in Action, Second Edition covers it

How deep it goes

Defines the method, shows SecurityFilterChain configuration, and defers detailed path and variable matching syntax.

Examples

Uses email suffix filtering and gateways that deny paths outside their assigned services.

What it assumes

Assumes basic authentication and authorization configuration, while distinguishing authentication from authorization.

What you can do after

Configure Spring Security to reject all requests matching a selected authorization rule.

How it connects

Connects authorization with authentication, permitAll(), requestMatchers(), roles, and authorities.

liveBookmanning.com

Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Related concepts

• permitAllcontrasts with · permitAll is a Spring Security authorization rule that permits access without requiring authentication or a particular authority.
• API gatewayconfigured by · An API gateway is an intermediary that provides an entry point for client requests to backend APIs or services and routes or otherwise mediates those requests.
• regular expressionuses · A formal pattern notation that describes sets of strings and enables text to be matched, searched, extracted, or transformed.

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.