net.trajano.ms.vertx.beans

Class DefaultAssertionRequiredPredicate

java.lang.Object

net.trajano.ms.vertx.beans.DefaultAssertionRequiredPredicate

All Implemented Interfaces:

Predicate<javax.ws.rs.container.ResourceInfo>, JwtAssertionRequiredPredicate

public class DefaultAssertionRequiredPredicate
extends Object
implements JwtAssertionRequiredPredicate

Checks if the URI has any JSR-250 annotations that would indicate a secured resource. On a method level if PermitAll is present then it will allow access without any assertion even if RolesAllowed is present on the class level.

However, the default is to require the assertion if nothing has been specified.

This will throw an IllegalArgumentException if both RolesAllowed and PermitAll are present in a class or method.

Author:

Archimedes Trajano

Field Summary

Fields

Modifier and Type	Field and Description
private static org.slf4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
DefaultAssertionRequiredPredicate()

Method Summary

Modifier and Type	Method and Description
boolean	test(javax.ws.rs.container.ResourceInfo resourceInfo) The key logic for the test is as follows:

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Predicate

and, isEqual, negate, or

Field Detail

LOG

private static final org.slf4j.Logger LOG

Constructor Detail

DefaultAssertionRequiredPredicate

public DefaultAssertionRequiredPredicate()

Method Detail

test

public boolean test(javax.ws.rs.container.ResourceInfo resourceInfo)

The key logic for the test is as follows:

Let:

a =	resourceMethodHasRolesAllowed
b =	resourceClassHasRolesAllowed
c =	resourceMethodHasPermitAll
d =	resourceClassHasPermitAll

The rules that need to be applied translate to:

 = a || ( b && !c ) || ( !a && !b && !c && !d )
 = (a || b || !d) && ( a || !c )
 

Specified by:

test in interface Predicate<javax.ws.rs.container.ResourceInfo>

Parameters:

resourceInfo - resource info

Returns:

true if the resource is protected