Class AbstractAuthorizingInInterceptor
java.lang.Object
org.apache.cxf.phase.AbstractPhaseInterceptor<Message>
org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor
- All Implemented Interfaces:
Interceptor<Message>,PhaseInterceptor<Message>
- Direct Known Subclasses:
SimpleAuthorizingInterceptor
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected booleanauthorize(SecurityContext sc, Method method) getDenyRoles(Method method) Returns a list of roles to be denied for a given method.getExpectedRoles(Method method) Returns a list of expected roles for a given method.voidhandleMessage(Message message) Intercepts a message.booleanprotected booleanisMethodProtected(Method method) protected booleanisUserInRole(SecurityContext sc, List<String> roles, boolean deny) voidsetAllowAnonymousUsers(boolean allowAnonymousUsers) Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor
addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore
-
Constructor Details
-
AbstractAuthorizingInInterceptor
public AbstractAuthorizingInInterceptor() -
AbstractAuthorizingInInterceptor
public AbstractAuthorizingInInterceptor(boolean uniqueId)
-
-
Method Details
-
handleMessage
Description copied from interface:InterceptorIntercepts a message. Interceptors should NOT invoke handleMessage or handleFault on the next interceptor - the interceptor chain will take care of this. -
authorize
-
isMethodProtected
-
isUserInRole
-
getExpectedRoles
Returns a list of expected roles for a given method.- Parameters:
method- Method- Returns:
- list, empty if no roles are available
-
getDenyRoles
Returns a list of roles to be denied for a given method.- Parameters:
method- Method- Returns:
- list, empty if no roles are available
-
isAllowAnonymousUsers
public boolean isAllowAnonymousUsers() -
setAllowAnonymousUsers
public void setAllowAnonymousUsers(boolean allowAnonymousUsers)
-