net.krotscheck.kangaroo.authz.admin.v1.auth

Class OAuth2SecurityContext

java.lang.Object

net.krotscheck.kangaroo.authz.admin.v1.auth.OAuth2SecurityContext

All Implemented Interfaces:

javax.ws.rs.core.SecurityContext

public final class OAuth2SecurityContext
extends Object
implements javax.ws.rs.core.SecurityContext

Private security context implementation that validates against our database of tokens.

Author:

Michael Krotscheck

Field Summary

Fields inherited from interface javax.ws.rs.core.SecurityContext

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

Constructor Summary

Constructors

Constructor and Description
OAuth2SecurityContext(OAuthToken token, Boolean isSecure) Construct an authentication context from an OAuth token and a secure flag.

Method Summary

Modifier and Type	Method and Description
String	getAuthenticationScheme() Get the authentication scheme.
Principal	getUserPrincipal() Return the current user identity.
boolean	isSecure() Was this request done via a secure request method?
boolean	isUserInRole(String roleName) WARNING: OVERLOADED TERMS

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OAuth2SecurityContext

public OAuth2SecurityContext(OAuthToken token,
                             Boolean isSecure)

Construct an authentication context from an OAuth token and a secure flag.

Parameters:

token - The OAuth token for this principal.

isSecure - Whether to secure the context.

Method Detail

getUserPrincipal

public Principal getUserPrincipal()

Return the current user identity.

Specified by:

getUserPrincipal in interface javax.ws.rs.core.SecurityContext

isUserInRole

public boolean isUserInRole(String roleName)

WARNING: OVERLOADED TERMS

In order to simplify the declaration of scope permissions, this method will check to see if the current user has been granted the provied "scope" rather than "role".

Specified by:

isUserInRole in interface javax.ws.rs.core.SecurityContext

isSecure

public boolean isSecure()

Was this request done via a secure request method?

Specified by:

isSecure in interface javax.ws.rs.core.SecurityContext

getAuthenticationScheme

public String getAuthenticationScheme()

Get the authentication scheme.

Specified by:

getAuthenticationScheme in interface javax.ws.rs.core.SecurityContext