@Retention(value=RUNTIME) @Target(value={METHOD,TYPE}) public @interface AnonymousAllowed
This means that any user will be able to trigger an endpoint method (if placed on an endpoint class) or the particular endpoint method (if placed on an endpoint method) without providing an authentication token.
If there are other supported security annotations present on the same class or method:
AnonymousAllowed
is overridden by
DenyAll
annotation, disallowing any user
from accessing the methodAnonymousAllowed
annotation overrides
PermitAll
and
RolesAllowed
annotations, allowing all
users to access the method (anonymous and authenticated users with any
security roles)for security rules check implementation
Copyright © 2020. All rights reserved.