be.objectify.deadbolt.java.actions.RestrictAction Maven / Gradle / Ivy
/*
* Copyright 2010-2016 Steve Chaloner
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package be.objectify.deadbolt.java.actions;
import be.objectify.deadbolt.java.ConstraintLogic;
import be.objectify.deadbolt.java.ConstraintPoint;
import be.objectify.deadbolt.java.DeadboltHandler;
import be.objectify.deadbolt.java.ExecutionContextProvider;
import be.objectify.deadbolt.java.cache.HandlerCache;
import com.typesafe.config.Config;
import play.mvc.Action;
import play.mvc.Http;
import play.mvc.Result;
import javax.inject.Inject;
import java.util.ArrayList;
import java.util.List;
import java.util.Optional;
import java.util.concurrent.CompletionStage;
/**
* Implements the {@link Restrict} functionality, i.e. within an {@link Group} roles are ANDed, and between
* {@link Group}s the role groups are ORed.
*
* @author Steve Chaloner ([email protected])
*/
public class RestrictAction extends AbstractRestrictiveAction
{
@Inject
public RestrictAction(final HandlerCache handlerCache,
final Config config,
final ExecutionContextProvider ecProvider,
final ConstraintLogic constraintLogic)
{
super(handlerCache,
config,
ecProvider,
constraintLogic);
}
public RestrictAction(final HandlerCache handlerCache,
final Config config,
final Restrict configuration,
final Action delegate,
final ExecutionContextProvider ecProvider,
final ConstraintLogic constraintLogic)
{
this(handlerCache,
config,
ecProvider,
constraintLogic);
this.configuration = configuration;
this.delegate = delegate;
}
@Override
public CompletionStage applyRestriction(final Http.Context ctx,
final DeadboltHandler deadboltHandler)
{
return constraintLogic.restrict(ctx,
deadboltHandler,
Optional.ofNullable(configuration.content()),
this::getRoleGroups,
this::authorizeAndExecute,
this::unauthorizeAndFail,
ConstraintPoint.CONTROLLER);
}
public List getRoleGroups()
{
final List roleGroups = new ArrayList<>();
for (Group group : configuration.value())
{
roleGroups.add(group.value());
}
return roleGroups;
}
@Override
public String getHandlerKey()
{
return configuration.handlerKey();
}
}