io.micronaut.security.rules

Class SecuredAnnotationRule

java.lang.Object

io.micronaut.security.rules.AbstractSecurityRule

io.micronaut.security.rules.SecuredAnnotationRule

All Implemented Interfaces:

Ordered, SecurityRule

@Singleton
public class SecuredAnnotationRule
extends AbstractSecurityRule

Security rule implementation for the Secured annotation.

Since:

1.0

Author:

James Kleeh

Field Summary

Fields

Modifier and Type	Field and Description
static Integer	ORDER The order of the rule.

Fields inherited from interface io.micronaut.security.rules.SecurityRule

DENY_ALL, IS_ANONYMOUS, IS_AUTHENTICATED

Fields inherited from interface io.micronaut.core.order.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor and Description
SecuredAnnotationRule(RolesFinder rolesFinder)
SecuredAnnotationRule(TokenConfiguration tokenConfiguration) Deprecated. use SecuredAnnotationRule( RolesFinder ) instead.

Method Summary

Modifier and Type	Method and Description
SecurityRuleResult	check(HttpRequest request, RouteMatch routeMatch, Map<String,Object> claims) Returns SecurityRuleResult.UNKNOWN if the Secured annotation is not found on the method or class, or if the route match is not method based.
int	getOrder()

Methods inherited from class io.micronaut.security.rules.AbstractSecurityRule

compareRoles, getRoles

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ORDER

public static final Integer ORDER

The order of the rule.

Constructor Detail

SecuredAnnotationRule

@Deprecated
public SecuredAnnotationRule(TokenConfiguration tokenConfiguration)

Deprecated. use SecuredAnnotationRule( RolesFinder ) instead.

Parameters:

tokenConfiguration - Token Configuration.

SecuredAnnotationRule

@Inject
public SecuredAnnotationRule(RolesFinder rolesFinder)

Parameters:

rolesFinder - Roles Parser

Method Detail

check

public SecurityRuleResult check(HttpRequest request,
                                @Nullable
                                RouteMatch routeMatch,
                                @Nullable
                                Map<String,Object> claims)

Returns SecurityRuleResult.UNKNOWN if the Secured annotation is not found on the method or class, or if the route match is not method based.

Parameters:

request - The current request

routeMatch - The matched route

claims - The claims from the token. Null if not authenticated

Returns:

The result

See Also:

SecurityRuleResult

getOrder

public int getOrder()

Returns:

The order of the object. Defaults to zero (no order).