Question 21

Explanation

@EnableMethodSecurity

To enable annotation-based security, we need to add the @EnableMethodSecurity annotation on any @Configuration class. This is how our configuration class will look like:

package com.javadevjournal.config;
 
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity ;
 
/**
 * EnableMethodSecurity to allow method level Spring security annotation for our application
 */
 
@EnableMethodSecurity (
        securedEnabled = true,
        jsr250Enabled = true,
        prePostEnabled = true
)
public class MethodSecurityConfig {
    //default configuration class
}

Let’s look at a few important parameters of the @EnableMethodSecurity  annotation

• securedEnabled – Determine if the @Security annotation should be enabled.

• jsr250Enabled – Allow us to use JSR250-based annotation (e.g. @RoleAllowed).

• prePostEnabled – Enable Spring’s pre/post annotations.

https://www.javadevjournal.com/spring-security/spring-method-security/

https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/config/annotation/method/configuration/EnableMethodSecurity.html