org.apache.shiro.authz.annotation

Annotation Type RequiresAuthentication

@Target(value={TYPE,METHOD})
 @Retention(value=RUNTIME)
public @interface RequiresAuthentication

Requires the current Subject to have been authenticated during their current session for the annotated class/instance/method to be accessed or invoked. This is more restrictive than the RequiresUser annotation.

This annotation basically ensures that subject.isAuthenticated() === true

See the RequiresUser and RememberMeAuthenticationToken JavaDoc for an explaination of why these two states are considered different.

Since:

0.9.0

See Also:

RequiresUser, RequiresGuest