Spring Expression Language
Spring Expression Language is an expression language integrated with Spring for querying and manipulating object graphs and evaluating values, conditions, and configuration rules.
Spring Security in Action, Second Edition
Spring Expression Language is an expression language for querying and manipulating object graphs within Spring applications.
- How it is used
- Applies authorization rules at the method level within Spring applications.
- How deep it goes
- Defines preauthorization and postauthorization expressions but does not detail SpEL syntax or evaluation internals.
- Examples
- Uses @EnableMethodSecurity, @PreAuthorize, and @PostAuthorize as configuration and authorization examples.
- What you can do after
- Apply authorization through named Spring Security annotations and delegate complex rules to a PermissionEvaluator.
Read how Spring Security in Action, Second Edition explains Spring Expression Language →
Spring AI in Action
Spring Expression Language is an expression language for querying and manipulating object graphs and evaluating conditions within Spring applications.
- How it is used
- Applies boolean expressions to authorize Spring method and tool invocations.
- How deep it goes
- Defines expression outcomes and shows role checks, then points to broader Spring Security expressions without detailing their syntax.
- Examples
- Uses getGameComplexity, the PREMIUM_USER role, @PreAuthorize, and authenticated HTTP requests as concrete examples.
- What you can do after
- Operate method-level authorization by enabling security and attaching SpEL expressions to protected methods.
Read how Spring AI in Action explains Spring Expression Language →
Related concepts
- @PostAuthorizeused by · @PostAuthorize is a Spring Security annotation that evaluates an authorization expression after a method returns and can inspect or reject its result.
- @PreAuthorizeused by · @PreAuthorize is a Spring Security annotation that evaluates an authorization expression before permitting an annotated method invocation.
- accessused by · access() is a Spring Security authorization configuration method that specifies or delegates access requirements for matching requests.
- transformer interfaceused by · Transformer is a Spring Integration interface that defines a contract for components that convert messages or their payloads.
- Spring Securityused by · Spring Security is a Spring framework for implementing application authentication, authorization, access control, and protection against common security threats.
- @PostFilterused by · @PostFilter is a Spring Security annotation that filters elements of a method's returned collection or array according to an authorization expression.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.