Package org.pac4j.core.authorization.checker

Class DefaultAuthorizationChecker

java.lang.Object

org.pac4j.core.authorization.checker.DefaultAuthorizationChecker

All Implemented Interfaces:

AuthorizationChecker

public class DefaultAuthorizationChecker
extends Object
implements AuthorizationChecker

Default way to check the authorizations (with default authorizers).

Since:

1.8.0

Author:

Jerome Leleu

Field Summary

Fields

Modifier and Type	Field	Description
protected static final CsrfAuthorizer	CSRF_AUTHORIZER	Constant CSRF_AUTHORIZER
protected static final Authorizer	IS_ANONYMOUS_AUTHORIZER	Constant IS_ANONYMOUS_AUTHORIZER
protected static final IsAuthenticatedAuthorizer	IS_AUTHENTICATED_AUTHORIZER	Constant IS_AUTHENTICATED_AUTHORIZER
protected static final IsFullyAuthenticatedAuthorizer	IS_FULLY_AUTHENTICATED_AUTHORIZER	Constant IS_FULLY_AUTHENTICATED_AUTHORIZER
protected static final Authorizer	IS_REMEMBERED_AUTHORIZER	Constant IS_REMEMBERED_AUTHORIZER

Constructor Summary

Constructors

Constructor	Description
DefaultAuthorizationChecker()

Method Summary

Modifier and Type	Method	Description
protected List<Authorizer>	computeAuthorizers(WebContext context, List<UserProfile> profiles, String authorizersValue, Map<String,Authorizer> authorizersMap, List<Client> clients)	computeAuthorizers.
protected List<Authorizer>	computeAuthorizersFromNames(String authorizerNames, Map<String,Authorizer> authorizersMap)	computeAuthorizersFromNames.
protected List<Authorizer>	computeDefaultAuthorizers(WebContext context, List<UserProfile> profiles, List<Client> clients, Map<String,Authorizer> authorizersMap)	computeDefaultAuthorizers.
protected boolean	containsClientType(Iterable<Client> clients, Class<? extends Client> clazz)	containsClientType.
boolean	isAuthorized(WebContext context, SessionStore sessionStore, List<UserProfile> profiles, String authorizersValue, Map<String,Authorizer> authorizersMap, List<Client> clients)	Check whether the user is authorized.
protected boolean	isAuthorized(WebContext context, SessionStore sessionStore, List<UserProfile> profiles, Collection<Authorizer> authorizers)	isAuthorized.
protected Authorizer	retrieveAuthorizer(String authorizerName, Map<String,Authorizer> authorizersMap)	retrieveAuthorizer.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CSRF_AUTHORIZER

protected static final CsrfAuthorizer CSRF_AUTHORIZER

Constant CSRF_AUTHORIZER

IS_ANONYMOUS_AUTHORIZER

protected static final Authorizer IS_ANONYMOUS_AUTHORIZER

Constant IS_ANONYMOUS_AUTHORIZER

IS_AUTHENTICATED_AUTHORIZER

protected static final IsAuthenticatedAuthorizer IS_AUTHENTICATED_AUTHORIZER

Constant IS_AUTHENTICATED_AUTHORIZER

IS_FULLY_AUTHENTICATED_AUTHORIZER

protected static final IsFullyAuthenticatedAuthorizer IS_FULLY_AUTHENTICATED_AUTHORIZER

Constant IS_FULLY_AUTHENTICATED_AUTHORIZER

IS_REMEMBERED_AUTHORIZER

protected static final Authorizer IS_REMEMBERED_AUTHORIZER

Constant IS_REMEMBERED_AUTHORIZER

Constructor Details

DefaultAuthorizationChecker

public DefaultAuthorizationChecker()

Method Details

isAuthorized

public boolean isAuthorized(WebContext context,
 SessionStore sessionStore,
 List<UserProfile> profiles,
 String authorizersValue,
 Map<String,Authorizer> authorizersMap,
 List<Client> clients)

Check whether the user is authorized.

Specified by:

isAuthorized in interface AuthorizationChecker

Parameters:

context - the web context

sessionStore - the session store

profiles - the profile

authorizersValue - the authorizers

authorizersMap - the map of authorizers

clients - the clients

Returns:

whether the user is authorized.

computeAuthorizers

protected List<Authorizer> computeAuthorizers(WebContext context,
 List<UserProfile> profiles,
 String authorizersValue,
 Map<String,Authorizer> authorizersMap,
 List<Client> clients)

computeAuthorizers.

Parameters:

context - a WebContext object

profiles - a List object

authorizersValue - a String object

authorizersMap - a Map object

clients - a List object

Returns:

a List object

computeDefaultAuthorizers

protected List<Authorizer> computeDefaultAuthorizers(WebContext context,
 List<UserProfile> profiles,
 List<Client> clients,
 Map<String,Authorizer> authorizersMap)

computeDefaultAuthorizers.

Parameters:

context - a WebContext object

profiles - a List object

clients - a List object

authorizersMap - a Map object

Returns:

a List object

computeAuthorizersFromNames

protected List<Authorizer> computeAuthorizersFromNames(String authorizerNames,
 Map<String,Authorizer> authorizersMap)

computeAuthorizersFromNames.

Parameters:

authorizerNames - a String object

authorizersMap - a Map object

Returns:

a List object

retrieveAuthorizer

protected Authorizer retrieveAuthorizer(String authorizerName,
 Map<String,Authorizer> authorizersMap)

retrieveAuthorizer.

Parameters:

authorizerName - a String object

authorizersMap - a Map object

Returns:

a Authorizer object

containsClientType

protected boolean containsClientType(Iterable<Client> clients,
 Class<? extends Client> clazz)

containsClientType.

Parameters:

clients - a List object

clazz - a Class object

Returns:

a boolean

isAuthorized

protected boolean isAuthorized(WebContext context,
 SessionStore sessionStore,
 List<UserProfile> profiles,
 Collection<Authorizer> authorizers)

isAuthorized.

Parameters:

context - a WebContext object

sessionStore - a SessionStore object

profiles - a List object

authorizers - a List object

Returns:

a boolean