org.apereo.cas.web.SecurityLogicInterceptor Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of cas-server-support-pac4j-api Show documentation

cas-server-support-pac4j-api

There is a newer version: 7.2.0-RC2

Show newest version

package org.apereo.cas.web;

import lombok.RequiredArgsConstructor;
import lombok.val;
import org.pac4j.core.adapter.FrameworkAdapter;
import org.pac4j.core.authorization.authorizer.DefaultAuthorizers;
import org.pac4j.core.config.Config;
import org.pac4j.core.matching.matcher.DefaultMatchers;
import org.pac4j.jee.context.JEEFrameworkParameters;
import org.springframework.web.servlet.HandlerInterceptor;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

/**
 * This is {@link SecurityLogicInterceptor}.
 *
 * @author Misagh Moayyed
 * @since 7.0.0
 */
@RequiredArgsConstructor
public class SecurityLogicInterceptor implements HandlerInterceptor {
    private final Config config;
    private final String clientNames;

    @Override
    public boolean preHandle(final HttpServletRequest request, final HttpServletResponse response, final Object handler) {
        FrameworkAdapter.INSTANCE.applyDefaultSettingsIfUndefined(this.config);
        val result = config.getSecurityLogic().perform(this.config, (ctx, session, profiles) -> true,
            this.clientNames, DefaultAuthorizers.IS_FULLY_AUTHENTICATED, DefaultMatchers.SECURITYHEADERS, new JEEFrameworkParameters(request, response));
        return result != null && Boolean.parseBoolean(result.toString());
    }

}