org.tynamo.security.services.TapestryRealmSecurityManager Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tapestry-security Show documentation

Tynamo Security package for Tapestry 5 based on Shiro Security

There is a newer version: 0.9.0

package org.tynamo.security.services;

import org.apache.shiro.mgt.DefaultSubjectDAO;
import org.apache.shiro.mgt.RememberMeManager;
import org.apache.shiro.mgt.SubjectFactory;
import org.apache.shiro.realm.Realm;
import org.apache.shiro.web.mgt.DefaultWebSecurityManager;
import org.apache.shiro.web.mgt.DefaultWebSessionStorageEvaluator;
import org.apache.shiro.web.session.mgt.ServletContainerSessionManager;
import org.apache.tapestry5.ioc.annotations.PostInjection;
import org.apache.tapestry5.ioc.services.RegistryShutdownHub;
import org.tynamo.security.Authenticator;

import java.util.Collection;

/**
 * This class is needed to point out the right constructor to use (from the three available in
 * DefaultWebSecurityManager) for tapestry-ioc and to allow injecting dependencies
 */
public class TapestryRealmSecurityManager extends DefaultWebSecurityManager {

	// Could easily make sessionStorageevaluator and sessionManager provided services as well, add as needed
	public TapestryRealmSecurityManager(Authenticator authenticator, SubjectFactory subjectFactory, RememberMeManager rememberMeManager, final Collection realms) {
		super();
		authenticator.setRealms(realms);
		setAuthenticator(authenticator);
		((DefaultSubjectDAO) this.subjectDAO).setSessionStorageEvaluator(new DefaultWebSessionStorageEvaluator());
		setSubjectFactory(subjectFactory);
		setRememberMeManager(rememberMeManager);
		setSessionManager(new ServletContainerSessionManager());
		setRealms(realms);
	}

	@PostInjection
	public void listenForShutdown(RegistryShutdownHub hub) {
		hub.addRegistryShutdownListener(new Runnable() {
			public void run() {
				destroy();
			}
		});
	}

}