org.hippoecm.hst.jaxrs.cxf
Class SecurityAnnotationInvokerPreprocessor

java.lang.Object
  org.hippoecm.hst.jaxrs.cxf.SecurityAnnotationInvokerPreprocessor

All Implemented Interfaces:

InvokerPreprocessor

public class SecurityAnnotationInvokerPreprocessor
extends Object
implements InvokerPreprocessor

SecurityAnnotationInvokerPreprocessor

This InvokerPreprocessor implementation checks the security annotations of the target operation and return a 403 Forbidden error message when not authorized for the operation by the annotation.

Version:

$Id$

Constructor Summary

SecurityAnnotationInvokerPreprocessor()

Method Summary

protected boolean	isForbiddenOperation(org.apache.cxf.message.Exchange exchange)
Object	preprocoess(org.apache.cxf.message.Exchange exchange, Object request) If this preprocessor is able to decide a return message before continuing with the default JAXRS processing, then this method should return a message object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityAnnotationInvokerPreprocessor

public SecurityAnnotationInvokerPreprocessor()

Method Detail

preprocoess

public Object preprocoess(org.apache.cxf.message.Exchange exchange,
                          Object request)

Description copied from interface: InvokerPreprocessor

If this preprocessor is able to decide a return message before continuing with the default JAXRS processing, then this method should return a message object. If this method returns null, then the next InvokerPreprocessor will be called or the default JAXRSInvoker will continue working.

Specified by:

preprocoess in interface InvokerPreprocessor

Returns:

null if it should continue with the next steps; non-null message object if processing should be stopped.

isForbiddenOperation

protected boolean isForbiddenOperation(org.apache.cxf.message.Exchange exchange)