WW-5626 per-property authorization for Jackson REST handlers (Approach C)#1674

Draft

lukaszlenart wants to merge 13 commits intoWW-5626-cleanupfrom

WW-5626-approach-c

Commits on May 4, 2026

WW-5626 spike: validate Jackson per-property authorization mechanism
lukaszlenart
committed
WW-5626 add ParameterAuthorizationContext for deserializer-level authorization

lukaszlenart
and
claude
committed
WW-5626 address review feedback on ParameterAuthorizationContext

lukaszlenart
and
claude
committed
WW-5626 add AuthorizationAwareContentTypeHandler marker interface
lukaszlenart
committed
WW-5626 add AuthorizingSettableBeanProperty for Jackson per-property authorization
lukaszlenart
committed
WW-5626 add ParameterAuthorizingModule installing the property wrapper on Jackson mappers
lukaszlenart
committed
WW-5626 register ParameterAuthorizingModule on default Jackson REST handlers
lukaszlenart
committed
WW-5626 use AuthorizationAwareContentTypeHandler path when handler supports it
lukaszlenart
committed
WW-5626 add integration tests proving the new Jackson authorization path is used
lukaszlenart
committed
WW-5626 deprecate XStreamHandler in favor of JacksonXmlHandler
lukaszlenart
committed
WW-5626 remove Jackson auth spike; replaced by production tests
lukaszlenart
committed

Commits on May 5, 2026