Add Kotlin expression-based authorization

Issue gh-8172

docs/manual/src/docs/asciidoc/_includes/servlet/authorization/expression-based.adoc

@@ -125,7 +125,20 @@ public class WebSecurity {
 
 You could refer to the method using:
 
-[source,xml]
+.Refer to method
+====
+.Java
+[source,java,role="primary"]
+----
+http
+    .authorizeRequests(authorize -> authorize
+        .antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
+        ...
+    )
+----
+
+.XML
+[source,xml,role="secondary"]
 ----
 <http>
 	<intercept-url pattern="/user/**"
@@ -134,17 +147,16 @@ You could refer to the method using:
 </http>
 ----
 
-or in Java configuration
-
-
-[source,java]
+.Kotlin
+[source,kotlin,role="secondary"]
 ----
-http
-    .authorizeRequests(authorize -> authorize
-        .antMatchers("/user/**").access("@webSecurity.check(authentication,request)")
-        ...
-    )
+http {
+    authorizeRequests {
+        authorize("/user/**", "@webSecurity.check(authentication,request)")
+    }
+}
 ----
+====
 
 [[el-access-web-path-variables]]
 ==== Path Variables in Web Security Expressions
@@ -166,7 +178,20 @@ public class WebSecurity {
 
 You could refer to the method using:
 
-[source,xml,attrs="-attributes"]
+.Path Variables
+====
+.Java
+[source,java,role="primary",attrs="-attributes"]
+----
+http
+	.authorizeRequests(authorize -> authorize
+		.antMatchers("/user/{userId}/**").access("@webSecurity.checkUserId(authentication,#userId)")
+		...
+	);
+----
+
+.XML
+[source,xml,role="secondary",attrs="-attributes"]
 ----
 <http>
 	<intercept-url pattern="/user/{userId}/**"
@@ -175,18 +200,18 @@ You could refer to the method using:
 </http>
 ----
 
-or in Java configuration
-
-[source,java,attrs="-attributes"]
+.Kotlin
+[source,kotlin,role="secondary",attrs="-attributes"]
 ----
-http
-	.authorizeRequests(authorize -> authorize
-		.antMatchers("/user/{userId}/**").access("@webSecurity.checkUserId(authentication,#userId)")
-		...
-	);
+http {
+    authorizeRequests {
+        authorize("/user/{userId}/**", "@webSecurity.checkUserId(authentication,#userId)")
+    }
+}
 ----
+====
 
-In both configurations URLs that match would pass in the path variable (and convert it) into checkUserId method.
+In this configuration URLs that match would pass in the path variable (and convert it) into checkUserId method.
 For example, if the URL were `/user/123/resource`, then the id passed in would be `123`.
 
 === Method Security Expressions