org.picketlink.http.internal.authorization

Class AbstractPathAuthorizer

java.lang.Object

org.picketlink.http.internal.authorization.AbstractPathAuthorizer

All Implemented Interfaces:

PathAuthorizer

Direct Known Subclasses:

ExpressionPathAuthorizer, GroupPathAuthorizer, RealmPathAuthorizer, RolePathAuthorizer

public abstract class AbstractPathAuthorizer
extends Object
implements PathAuthorizer

Author:

Pedro Igor

Constructor Summary

Constructors

Constructor and Description
AbstractPathAuthorizer()

Method Summary

Modifier and Type	Method and Description
boolean	authorize(PathConfiguration pathConfiguration, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Performs an authorization check for a specific PathConfiguration considering an incoming HttpServletRequest.
protected abstract boolean	doAuthorize(PathConfiguration pathConfiguration, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
protected Identity	getIdentity()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractPathAuthorizer

public AbstractPathAuthorizer()

Method Detail

authorize

public boolean authorize(PathConfiguration pathConfiguration,
                         javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response)

Description copied from interface: PathAuthorizer

Performs an authorization check for a specific PathConfiguration considering an incoming HttpServletRequest.

Specified by:

authorize in interface PathAuthorizer

Parameters:

pathConfiguration - The configuration associated with the given request.

request - The incoming request,

response - The response.

Returns:

True if the request is authorized to access the given path. Otherwise, returns false.

doAuthorize

protected abstract boolean doAuthorize(PathConfiguration pathConfiguration,
                                       javax.servlet.http.HttpServletRequest request,
                                       javax.servlet.http.HttpServletResponse response)

getIdentity

protected Identity getIdentity()