com.kero.security.core.scheme.ClassAccessScheme Maven / Gradle / Ivy
package com.kero.security.core.scheme;
import java.util.Collection;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import com.kero.security.core.access.Access;
import com.kero.security.core.agent.KeroAccessAgent;
import com.kero.security.core.config.PreparedAccessConfiguration;
import com.kero.security.core.config.PreparedAccessConfigurationImpl;
import com.kero.security.core.config.action.Action;
import com.kero.security.core.config.action.ActionDeny;
import com.kero.security.core.config.action.ActionGrant;
import com.kero.security.core.property.LocalProperty;
import com.kero.security.core.property.Property;
import com.kero.security.core.role.Role;
import com.kero.security.core.scheme.exception.AccessSchemePrepareException;
public class ClassAccessScheme implements AccessScheme {
protected static Logger LOGGER = LoggerFactory.getLogger("Kero-Security");
protected Class type;
protected String name;
protected Access defaultAccess = Access.UNKNOWN;
protected Map localProperties = new HashMap<>();
protected KeroAccessAgent agent;
protected boolean inherit = true;
public ClassAccessScheme() {
}
public ClassAccessScheme(KeroAccessAgent agent, String name, Class type) {
this.agent = agent;
this.name = name;
this.type = type;
}
public PreparedAccessConfiguration prepareAccessConfiguration(Collection rolesArg) {
Set roles = new HashSet<>(rolesArg);
LOGGER.debug("Prepare access configuration for \""+this.name+"\" roles: "+roles);
Map preparedActions = new HashMap<>();
Set properties = collectProperties();
properties.forEach((property)-> {
preparedActions.put(property.getName(), property.prepare(roles));
});
Action defaultAction = determineDefaultAction(roles);
return new PreparedAccessConfigurationImpl(this, preparedActions, defaultAction);
}
protected Action determineDefaultAction(Collection roles) {
Access defaultAccess = determineDefaultAccess();
if(defaultAccess == Access.GRANT) {
return new ActionGrant(this, roles);
}
else if(defaultAccess == Access.DENY) {
return new ActionDeny(this);
}
throw new AccessSchemePrepareException("Can't prepare default access for: \""+this.name+"\". Your Kero-Security configuration is bad, if you see this exception.");
}
public Set collectProperties() {
Map props = new HashMap<>();
for(Property prop : getLocalProperties()) {
props.put(prop.getName(), prop);
}
if(this.isInherit()) {
Set parentProps = this.getParent().collectProperties();
parentProps.forEach(prop -> props.putIfAbsent(prop.getName(), prop));
}
return new HashSet<>(props.values());
}
public Access determineDefaultAccess() {
Access access = findDefaultAccess();
if(access == Access.UNKNOWN) {
access = agent.getDefaultAccess();
}
return access;
}
protected Access findDefaultAccess() {
if(this.hasDefaultAccess()) return this.getDefaultAccess();
if(!this.inherit) return Access.UNKNOWN;
return getParent().determineDefaultAccess();
}
@Override
public Property createLocalProperty(String name) {
LOGGER.debug("Creating property: \""+name+"\" for scheme: \""+this.name+"\"");
Property prop = new LocalProperty(this, name);
localProperties.put(name, prop);
return prop;
}
@Override
public boolean hasLocalProperty(String name) {
return localProperties.containsKey(name);
}
@Override
public Property getLocalProperty(String name) {
return localProperties.get(name);
}
@Override
public Set getLocalProperties() {
return new HashSet<>(localProperties.values());
}
@Override
public void setDefaultAccess(Access access) {
this.defaultAccess = access;
}
@Override
public boolean hasDefaultAccess() {
return this.defaultAccess != Access.UNKNOWN;
}
@Override
public Access getDefaultAccess() {
return this.defaultAccess;
}
@Override
public Class getTypeClass() {
return this.type;
}
@Override
public KeroAccessAgent getAgent() {
return this.agent;
}
@Override
public String getName() {
return this.name;
}
@Override
public void setInherit(boolean i) {
this.inherit = i;
}
@Override
public boolean isInherit() {
return this.inherit;
}
}