de.taimos.dvalin.jaxrs.security.token

Class TokenAuthFilter

java.lang.Object

de.taimos.dvalin.jaxrs.providers.AuthorizationProvider

de.taimos.dvalin.jaxrs.security.token.TokenAuthFilter

All Implemented Interfaces:

javax.ws.rs.container.ContainerRequestFilter

public class TokenAuthFilter
extends AuthorizationProvider

Field Summary

Fields inherited from class de.taimos.dvalin.jaxrs.providers.AuthorizationProvider

ANONYMOUS_USER

Constructor Summary

Constructors

Constructor and Description
TokenAuthFilter()

Method Summary

Modifier and Type	Method and Description
protected org.apache.cxf.security.SecurityContext	handleAuthHeader(javax.ws.rs.container.ContainerRequestContext requestContext, org.apache.cxf.message.Message msg, String type, String auth) handle the presence of the Authorization header
protected org.apache.cxf.security.SecurityContext	handleOther(javax.ws.rs.container.ContainerRequestContext requestContext, org.apache.cxf.message.Message msg, javax.ws.rs.core.HttpHeaders head) handle other auth methods like sessions, custom headers, etc
protected boolean	isAuthorizationMandatory()

Methods inherited from class de.taimos.dvalin.jaxrs.providers.AuthorizationProvider

abortUnauthorized, createAnonymousSC, createSC, filter, loginUser, sendWWWAuthenticate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TokenAuthFilter

public TokenAuthFilter()

Method Detail

isAuthorizationMandatory

protected boolean isAuthorizationMandatory()

Specified by:

isAuthorizationMandatory in class AuthorizationProvider

Returns:

true if the request should fail if no valid user is found

handleAuthHeader

protected org.apache.cxf.security.SecurityContext handleAuthHeader(javax.ws.rs.container.ContainerRequestContext requestContext,
                                                                   org.apache.cxf.message.Message msg,
                                                                   String type,
                                                                   String auth)

Description copied from class: AuthorizationProvider

handle the presence of the Authorization header

Specified by:

handleAuthHeader in class AuthorizationProvider

Parameters:

requestContext - the CXF request context

msg - the message

type - the Authorization type (Basic|Bearer|...)

auth - the auth part of the header

Returns:

the SecurityContext if logged in or null

handleOther

protected org.apache.cxf.security.SecurityContext handleOther(javax.ws.rs.container.ContainerRequestContext requestContext,
                                                              org.apache.cxf.message.Message msg,
                                                              javax.ws.rs.core.HttpHeaders head)

Description copied from class: AuthorizationProvider

handle other auth methods like sessions, custom headers, etc

Specified by:

handleOther in class AuthorizationProvider

Parameters:

requestContext - the CXF request context

msg - the message

head - the HTTP headers

Returns:

the SecurityContext if logged in or null