org.ligoj.bootstrap.http.security.ExtendedWebSecurityExpressionRoot Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of bootstrap-web Show documentation

There is a newer version: 3.1.22

/*
 * Licensed under MIT (https://github.com/ligoj/ligoj/blob/master/LICENSE)
 */
package org.ligoj.bootstrap.http.security;

import jakarta.servlet.http.HttpServletRequest;
import org.springframework.security.core.Authentication;
import org.springframework.security.web.FilterInvocation;
import org.springframework.security.web.access.expression.WebSecurityExpressionRoot;

import java.util.function.Supplier;

/**
 * Extended expression to but used in method and authentication voter.
 */
public class ExtendedWebSecurityExpressionRoot extends WebSecurityExpressionRoot {

	/**
	 * Takes authentication and request contexts.
	 *
	 * @param authentication
	 *            the current authentication. Might be anonymous.
	 * @param invocation
	 *            current invocation. Can be method or request.
	 */
	public ExtendedWebSecurityExpressionRoot(final Authentication authentication, final FilterInvocation invocation) {
		super(authentication, invocation);
	}

	/**
	 * Takes authentication and request contexts.
	 *
	 * @param authentication
	 *            the current authentication. Might be anonymous.
	 * @param request
	 *            current invocation. Can be method or request.
	 */
	public ExtendedWebSecurityExpressionRoot(final Supplier authentication, final HttpServletRequest request) {
		super(authentication, request);
	}

	/**
	 * Validate the current request a defined parameter.
	 *
	 * @param parameter
	 *            the expected non-blank parameter.
	 * @return true if the parameter of the current request is not blank.
	 */
	public boolean hasParameter(final String parameter) {
		return new HasParameterRequestMatcher(parameter).matches(request);
	}

	/**
	 * Validate the current request a defined header.
	 *
	 * @param header
	 *            the expected non-blank header.
	 * @return true if the header of the current request is not blank.
	 */
	public boolean hasHeader(final String header) {
		return new HasHeaderRequestMatcher(header).matches(request);
	}

}