Extend AuthorizationChannelInterceptor for postReceive() implementation #11915
Labels
in: messaging
An issue in spring-security-messaging
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
Expected Behavior
The
AuthorizationChannelInterceptor
implements a similar to thepreSend()
in thepostReceive()
contract which is applicable for thePollableChannel
implementations.Current Behavior
The
AuthorizationChannelInterceptor
currently implements onlypreSend()
for decision to put aMessage<?>
onto theMessageChannel
or not.Context
Not all
MessageChannel
implementations are justSubscribableChannel
, there is aPollableChannel
which is implemented in Spring Integration as aQueueChannel
.With this channel there is no direct connection between producer and consumer. A
QueueChannel
is polled by theTaskScheduler
.So, we need to be secured on that receiving side against messages we poll from the channel.
This will lead to a proper messaging security support in Spring Integration applications.
The text was updated successfully, but these errors were encountered: