Intercept url in spring security

Question

I'm trying to understand how uel-interception works in spring security. Let assume that we write the following rule in our security config:

<security:intercept-url pattern="/secure/super/**" access="ROLE_WE_DONT_HAVE"/>

My question is is Spring Security going to create the object of AbstractSecurityInterceptor or what? I need to understand that because if my assumption about creation an object for each rule right I'm going to create the instances dynamically by myself in order to control authentication rule dynamically in runtime.

Answer 1

基本上，spring security将创建一个FilterSecurityInterceptor实例，此过滤器将读取url模式，并尝试在此处保护所映射的url的更多信息spring security core