Package org.pac4j.core.authorization.checker

Class DefaultAuthorizationChecker

java.lang.Object

org.pac4j.core.authorization.checker.DefaultAuthorizationChecker

All Implemented Interfaces:

AuthorizationChecker

public class DefaultAuthorizationChecker
extends Object
implements AuthorizationChecker

Default way to check the authorizations (with default authorizers).

Since:

1.8.0

Author:

Jerome Leleu

Field Summary

Fields

Modifier and Type	Field	Description
protected static final CsrfAuthorizer	CSRF_AUTHORIZER
protected static final IsAnonymousAuthorizer	IS_ANONYMOUS_AUTHORIZER
protected static final IsAuthenticatedAuthorizer	IS_AUTHENTICATED_AUTHORIZER
protected static final IsFullyAuthenticatedAuthorizer	IS_FULLY_AUTHENTICATED_AUTHORIZER
protected static final IsRememberedAuthorizer	IS_REMEMBERED_AUTHORIZER

Constructor Summary

Constructors

Constructor	Description
DefaultAuthorizationChecker()

Method Summary

Modifier and Type	Method	Description
protected List<Authorizer>	computeAuthorizers(WebContext context, List<UserProfile> profiles, String authorizersValue, Map<String,Authorizer> authorizersMap, List<Client> clients)
protected List<Authorizer>	computeAuthorizersFromNames(String authorizerNames, Map<String,Authorizer> authorizersMap)
protected List<Authorizer>	computeDefaultAuthorizers(WebContext context, List<UserProfile> profiles, List<Client> clients, Map<String,Authorizer> authorizersMap)
protected boolean	containsClientType(List<Client> clients, Class<? extends Client> clazz)
boolean	isAuthorized(WebContext context, SessionStore sessionStore, List<UserProfile> profiles, String authorizersValue, Map<String,Authorizer> authorizersMap, List<Client> clients)	Check whether the user is authorized.
protected boolean	isAuthorized(WebContext context, SessionStore sessionStore, List<UserProfile> profiles, List<Authorizer> authorizers)
protected Authorizer	retrieveAuthorizer(String authorizerName, Map<String,Authorizer> authorizersMap)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CSRF_AUTHORIZER

protected static final CsrfAuthorizer CSRF_AUTHORIZER

IS_ANONYMOUS_AUTHORIZER

protected static final IsAnonymousAuthorizer IS_ANONYMOUS_AUTHORIZER

IS_AUTHENTICATED_AUTHORIZER

protected static final IsAuthenticatedAuthorizer IS_AUTHENTICATED_AUTHORIZER

IS_FULLY_AUTHENTICATED_AUTHORIZER

protected static final IsFullyAuthenticatedAuthorizer IS_FULLY_AUTHENTICATED_AUTHORIZER

IS_REMEMBERED_AUTHORIZER

protected static final IsRememberedAuthorizer IS_REMEMBERED_AUTHORIZER

Constructor Details

DefaultAuthorizationChecker

public DefaultAuthorizationChecker()

Method Details

isAuthorized

public boolean isAuthorized(WebContext context,
 SessionStore sessionStore,
 List<UserProfile> profiles,
 String authorizersValue,
 Map<String,Authorizer> authorizersMap,
 List<Client> clients)

Description copied from interface: AuthorizationChecker

Check whether the user is authorized.

Specified by:

isAuthorized in interface AuthorizationChecker

Parameters:

context - the web context

sessionStore - the session store

profiles - the profile

authorizersValue - the authorizers

authorizersMap - the map of authorizers

clients - the clients

Returns:

whether the user is authorized.

computeAuthorizers

protected List<Authorizer> computeAuthorizers(WebContext context,
 List<UserProfile> profiles,
 String authorizersValue,
 Map<String,Authorizer> authorizersMap,
 List<Client> clients)

computeDefaultAuthorizers

protected List<Authorizer> computeDefaultAuthorizers(WebContext context,
 List<UserProfile> profiles,
 List<Client> clients,
 Map<String,Authorizer> authorizersMap)

computeAuthorizersFromNames

protected List<Authorizer> computeAuthorizersFromNames(String authorizerNames,
 Map<String,Authorizer> authorizersMap)

retrieveAuthorizer

protected Authorizer retrieveAuthorizer(String authorizerName,
 Map<String,Authorizer> authorizersMap)

containsClientType

protected boolean containsClientType(List<Client> clients,
 Class<? extends Client> clazz)

isAuthorized

protected boolean isAuthorized(WebContext context,
 SessionStore sessionStore,
 List<UserProfile> profiles,
 List<Authorizer> authorizers)