io.cellery.observability.auth

Class CelleryLocalAuthProvider

java.lang.Object

io.cellery.observability.auth.CelleryLocalAuthProvider

All Implemented Interfaces:

AuthProvider

public class CelleryLocalAuthProvider
extends Object
implements AuthProvider

Cellery default local auth provider. This assumes that the user has access to all the namespaces.

Constructor Summary

Constructors

Constructor and Description
CelleryLocalAuthProvider()

Method Summary

Modifier and Type	Method and Description
Permission[]	getAllAllowedPermissions(String accessToken) Get an array of all the permissions allowed for a user.
protected boolean	isTokenValid(String token) Validate if a token is a valid token issued by the IdP.
boolean	isTokenValid(String token, Permission requiredPermission) Validate the token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CelleryLocalAuthProvider

public CelleryLocalAuthProvider()
                         throws AuthProviderException

Throws:

AuthProviderException

Method Detail

isTokenValid

public boolean isTokenValid(String token,
                            Permission requiredPermission)
                     throws AuthProviderException

Description copied from interface: AuthProvider

Validate the token. Empty string as runtime in the required permission represents an action that is not runtime aware. Empty string as namespace in the required permission represents an action that is not namespace aware.

Specified by:

isTokenValid in interface AuthProvider

Parameters:

token - The token of which the validity should be checked

requiredPermission - The permission required by the user

Returns:

True if the token is valid

Throws:

AuthProviderException - if validating the token fails

getAllAllowedPermissions

public Permission[] getAllAllowedPermissions(String accessToken)

Description copied from interface: AuthProvider

Get an array of all the permissions allowed for a user. This is called once per each portal load. This should return all the authorized namespaces in all the authorized runtimes. This is used to ensure that the relevant sections are shown to the user.

Specified by:

getAllAllowedPermissions in interface AuthProvider

Parameters:

accessToken - The access token sent for the action

Returns:

The map of authorized runtime namespaces

isTokenValid

protected boolean isTokenValid(String token)
                        throws AuthProviderException

Validate if a token is a valid token issued by the IdP.

Parameters:

token - The token to be validated

Returns:

True if the token is valid

Throws:

AuthProviderException - If validating fails