Class AbstractAuthorizingInInterceptor
- java.lang.Object
-
- org.apache.cxf.phase.AbstractPhaseInterceptor<Message>
-
- org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor
-
- All Implemented Interfaces:
Interceptor<Message>
,PhaseInterceptor<Message>
- Direct Known Subclasses:
SimpleAuthorizingInterceptor
public abstract class AbstractAuthorizingInInterceptor extends AbstractPhaseInterceptor<Message>
-
-
Constructor Summary
Constructors Constructor Description AbstractAuthorizingInInterceptor()
AbstractAuthorizingInInterceptor(boolean uniqueId)
-
Method Summary
All Methods Instance Methods Abstract Methods Concrete Methods Modifier and Type Method Description protected boolean
authorize(SecurityContext sc, Method method)
protected List<String>
getDenyRoles(Method method)
Returns a list of roles to be denied for a given method.protected abstract List<String>
getExpectedRoles(Method method)
Returns a list of expected roles for a given method.void
handleMessage(Message message)
Intercepts a message.boolean
isAllowAnonymousUsers()
protected boolean
isMethodProtected(Method method)
protected boolean
isUserInRole(SecurityContext sc, List<String> roles, boolean deny)
void
setAllowAnonymousUsers(boolean allowAnonymousUsers)
-
Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor
addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore
-
-
-
-
Method Detail
-
handleMessage
public void handleMessage(Message message)
Description copied from interface:Interceptor
Intercepts a message. Interceptors should NOT invoke handleMessage or handleFault on the next interceptor - the interceptor chain will take care of this.
-
authorize
protected boolean authorize(SecurityContext sc, Method method)
-
isMethodProtected
protected boolean isMethodProtected(Method method)
-
isUserInRole
protected boolean isUserInRole(SecurityContext sc, List<String> roles, boolean deny)
-
getExpectedRoles
protected abstract List<String> getExpectedRoles(Method method)
Returns a list of expected roles for a given method.- Parameters:
method
- Method- Returns:
- list, empty if no roles are available
-
getDenyRoles
protected List<String> getDenyRoles(Method method)
Returns a list of roles to be denied for a given method.- Parameters:
method
- Method- Returns:
- list, empty if no roles are available
-
isAllowAnonymousUsers
public boolean isAllowAnonymousUsers()
-
setAllowAnonymousUsers
public void setAllowAnonymousUsers(boolean allowAnonymousUsers)
-
-