Module colesico.framework.security

Package colesico.framework.security

Class DefaultSecurityKit

java.lang.Object

colesico.framework.security.DefaultSecurityKit

All Implemented Interfaces:

SecurityInterceptor, SecurityKit

public class DefaultSecurityKit
extends java.lang.Object
implements SecurityInterceptor

Default security kit implementation. Extend this class to customize principal control.

Author:

Vladlen Larionov

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	DefaultSecurityKit.PrincipalHolder

Field Summary

Fields

Modifier and Type	Field	Description
protected javax.inject.Provider<colesico.framework.teleapi.DataPort>	dataPortProv
protected colesico.framework.ioc.ThreadScope	threadScope

Fields inherited from interface colesico.framework.security.SecurityInterceptor

INTERCEPT_REQUIRE_AUTHORITY_METHOD, INTERCEPT_REQUIRE_PRINCIPAL_METHOD

Fields inherited from interface colesico.framework.security.SecurityKit

REQUIRE_AUTHORITY_METHOD, REQUIRE_PRINCIPAL_METHOD

Constructor Summary

Constructors

Constructor	Description
DefaultSecurityKit(colesico.framework.ioc.ThreadScope threadScope, javax.inject.Provider<colesico.framework.teleapi.DataPort> dataPortProv)

Method Summary

Modifier and Type	Method	Description
<P extends Principal> P	getPrincipal()	Returns active valid principal if it present.
boolean	hasAuthority(java.lang.String... authorityId)	Check active principal for at least one valid authority.
protected boolean	hasAuthorityControl(Principal principal, java.lang.String... authorityId)
java.lang.Object	interceptRequireAuthority(colesico.framework.service.InvocationContext context)
java.lang.Object	interceptRequirePrincipal(colesico.framework.service.InvocationContext context)
protected Principal	principalReadControl(colesico.framework.teleapi.DataPort<java.lang.Object,java.lang.Object> port)
protected void	principalWriteControl(colesico.framework.teleapi.DataPort<java.lang.Object,java.lang.Object> port, Principal principal)
void	setPrincipal(Principal principal)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface colesico.framework.security.SecurityKit

requireAuthority, requirePrincipal

Field Detail

threadScope

protected final colesico.framework.ioc.ThreadScope threadScope

dataPortProv

protected final javax.inject.Provider<colesico.framework.teleapi.DataPort> dataPortProv

Constructor Detail

DefaultSecurityKit

@Inject
public DefaultSecurityKit(colesico.framework.ioc.ThreadScope threadScope,
                          javax.inject.Provider<colesico.framework.teleapi.DataPort> dataPortProv)

Method Detail

principalReadControl

protected Principal principalReadControl(colesico.framework.teleapi.DataPort<java.lang.Object,java.lang.Object> port)

principalWriteControl

protected void principalWriteControl(colesico.framework.teleapi.DataPort<java.lang.Object,java.lang.Object> port,
                                     Principal principal)

hasAuthorityControl

protected boolean hasAuthorityControl(Principal principal,
                                      java.lang.String... authorityId)

getPrincipal

public final <P extends Principal> P getPrincipal()

Description copied from interface: SecurityKit

Returns active valid principal if it present.

Specified by:

getPrincipal in interface SecurityKit

Returns:

null if principal is invalid or absent.

setPrincipal

public final void setPrincipal(Principal principal)

Specified by:

setPrincipal in interface SecurityKit

hasAuthority

public final boolean hasAuthority(java.lang.String... authorityId)

Description copied from interface: SecurityKit

Check active principal for at least one valid authority.

Specified by:

hasAuthority in interface SecurityKit

Returns:

false if all are invalid

interceptRequirePrincipal

public final java.lang.Object interceptRequirePrincipal(colesico.framework.service.InvocationContext context)

Specified by:

interceptRequirePrincipal in interface SecurityInterceptor

interceptRequireAuthority

public final java.lang.Object interceptRequireAuthority(colesico.framework.service.InvocationContext context)

Specified by:

interceptRequireAuthority in interface SecurityInterceptor