com.github.exabrial.cdi.javaxsecurity.JavaXSecurityInterceptor Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of javax-security-cdi-extension Show documentation

javax.security CDI Portable Extension

The newest version!

package com.github.exabrial.cdi.javaxsecurity;

import java.util.stream.Stream;

import javax.annotation.security.RolesAllowed;
import javax.enterprise.inject.Instance;
import javax.inject.Inject;
import javax.interceptor.AroundInvoke;
import javax.interceptor.InvocationContext;

import org.slf4j.Logger;

public class JavaXSecurityInterceptor {
	@Inject
	private Instance logInstance;
	@Inject
	@SkipSecurity
	private Instance skipSecurityInstance;
	@Inject
	private JavaXSecurityChecker javaXSecurityChecker;
	@Inject
	private JavaXSecurityFailureHandler handler;

	@AroundInvoke
	public Object intercept(InvocationContext ctx) throws Exception {
		boolean skipSecurity = skipSecurityInstance.isUnsatisfied() ? false : skipSecurityInstance.get();
		if (!skipSecurity) {
			if (javaXSecurityChecker.authenticate()) {
				RolesAllowed rolesAllowed = ctx.getMethod().getAnnotation(RolesAllowed.class);
				if (rolesAllowed == null) {
					rolesAllowed = ctx.getTarget().getClass().getAnnotation(RolesAllowed.class);
				}
				if (rolesAllowed != null) {
					Stream.of(rolesAllowed.value()).forEach(roleName -> {
						if (!javaXSecurityChecker.isCallerInRole(roleName)) {
							handler.authorizationFailure(ctx.getTarget().getClass(), ctx.getMethod(), roleName);
						}
					});
				}
			} else {
				handler.authenticationFailure();
			}
		} else if (!logInstance.isUnsatisfied()) {
			logInstance.get().warn("check() Security disabled; skipping check for:{}:{}", ctx.getTarget().getClass().getName(),
					ctx.getMethod().getName());
		}
		return ctx.proceed();
	}
}