controller-domain-level-security.java

@RestController
@RequestMapping("/admin")
@RequiredArgsConstructor
public class AdminController {

    private final UserManagementService userManagementService;

    @Secured("ROLE_ANONYMOUS")
    @PostMapping(path = "/user-claims/{uid}")
    public void setUserClaims(
            @PathVariable String uid,
            @RequestBody Map<EntityType, Map<Long, Set<Permission>>> requestedClaims
    ) throws FirebaseAuthException {
        userManagementService.setTokenClaims(uid, requestedClaims);
    }
}