org.hippoecm.hst.jaxrs.cxf

Class SecurityAnnotationInvokerPreprocessor

java.lang.Object

org.hippoecm.hst.jaxrs.cxf.SecurityAnnotationInvokerPreprocessor

All Implemented Interfaces:

InvokerPreprocessor

public class SecurityAnnotationInvokerPreprocessor
extends Object
implements InvokerPreprocessor

SecurityAnnotationInvokerPreprocessor

This InvokerPreprocessor implementation checks the security annotations of the target operation and return a 403 Forbidden error message when not authorized for the operation by the annotation.

Constructor Summary

Constructors

Constructor and Description
SecurityAnnotationInvokerPreprocessor()

Method Summary

Modifier and Type	Method and Description
protected javax.ws.rs.core.SecurityContext	getSecurityContext(org.apache.cxf.message.Exchange exchange)
protected boolean	isForbiddenOperation(org.apache.cxf.message.Exchange exchange)
Object	preprocoess(org.apache.cxf.message.Exchange exchange, Object request) If this preprocessor is able to decide a return message before continuing with the default JAXRS processing, then this method should return a message object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityAnnotationInvokerPreprocessor

public SecurityAnnotationInvokerPreprocessor()

Method Detail

preprocoess

public Object preprocoess(org.apache.cxf.message.Exchange exchange,
                          Object request)

Description copied from interface: InvokerPreprocessor

If this preprocessor is able to decide a return message before continuing with the default JAXRS processing, then this method should return a message object. If this method returns null, then the next InvokerPreprocessor will be called or the default JAXRSInvoker will continue working.

Specified by:

preprocoess in interface InvokerPreprocessor

Returns:

null if it should continue with the next steps; non-null message object if processing should be stopped.

isForbiddenOperation

protected boolean isForbiddenOperation(org.apache.cxf.message.Exchange exchange)

getSecurityContext

protected javax.ws.rs.core.SecurityContext getSecurityContext(org.apache.cxf.message.Exchange exchange)