pl.allegro.tech.hermes.management.api.auth.HermesSecurityAwareRequestUser Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of hermes-management Show documentation

Fast and reliable message broker built on top of Kafka.

There is a newer version: 2.8.0

package pl.allegro.tech.hermes.management.api.auth;

import jakarta.ws.rs.container.ContainerRequestContext;
import jakarta.ws.rs.core.SecurityContext;
import pl.allegro.tech.hermes.api.OwnerId;
import pl.allegro.tech.hermes.management.api.auth.SecurityProvider.OwnershipResolver;
import pl.allegro.tech.hermes.management.domain.auth.RequestUser;

public class HermesSecurityAwareRequestUser implements RequestUser {
  private final String username;
  private final boolean isAdmin;
  private final OwnershipResolver ownershipResolver;

  public HermesSecurityAwareRequestUser(ContainerRequestContext requestContext) {
    SecurityContext securityContext = requestContext.getSecurityContext();
    username = securityContext.getUserPrincipal().getName();
    isAdmin = securityContext.isUserInRole(Roles.ADMIN);
    ownershipResolver =
        (OwnershipResolver) requestContext.getProperty(AuthorizationFilter.OWNERSHIP_RESOLVER);
  }

  @Override
  public String getUsername() {
    return username;
  }

  @Override
  public boolean isAdmin() {
    return isAdmin;
  }

  @Override
  public boolean isOwner(OwnerId ownerId) {
    return ownershipResolver.isUserAnOwner(ownerId);
  }
}