org.springframework.flex.security
Class EndpointInterceptor

java.lang.Object
  org.springframework.security.intercept.AbstractSecurityInterceptor
      org.springframework.flex.security.EndpointInterceptor

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.MessageSourceAware, MessageInterceptor

public class EndpointInterceptor
extends org.springframework.security.intercept.AbstractSecurityInterceptor
implements MessageInterceptor

Security interceptor that secures messages being passed to BlazeDS endpoints based on the security attributes configured for the endpoint being invoked.

Author:

Jeremy Grelle

Field Summary

Fields inherited from class org.springframework.security.intercept.AbstractSecurityInterceptor

logger, messages

Constructor Summary

EndpointInterceptor()

Method Summary

EndpointDefinitionSource	getObjectDefinitionSource()
java.lang.Class	getSecureObjectClass()
org.springframework.security.intercept.ObjectDefinitionSource	obtainObjectDefinitionSource()
flex.messaging.messages.Message	postProcess(MessageProcessingContext context, flex.messaging.messages.Message inputMessage, flex.messaging.messages.Message outputMessage) Hook for post-processing the outgoing AMF Message
flex.messaging.messages.Message	preProcess(MessageProcessingContext context, flex.messaging.messages.Message inputMessage) Hook for pre-processing the incoming AMF Message
void	setObjectDefinitionSource(EndpointDefinitionSource newSource) Sets the EndpointDefinitionSource for the endpoint being secured

Methods inherited from class org.springframework.security.intercept.AbstractSecurityInterceptor

afterInvocation, afterPropertiesSet, beforeInvocation, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isAlwaysReauthenticate, isRejectPublicInvocations, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setAlwaysReauthenticate, setApplicationEventPublisher, setAuthenticationManager, setMessageSource, setRejectPublicInvocations, setRunAsManager, setValidateConfigAttributes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EndpointInterceptor

public EndpointInterceptor()

Method Detail

getObjectDefinitionSource

public EndpointDefinitionSource getObjectDefinitionSource()

getSecureObjectClass

public java.lang.Class getSecureObjectClass()

Specified by:

getSecureObjectClass in class org.springframework.security.intercept.AbstractSecurityInterceptor

obtainObjectDefinitionSource

public org.springframework.security.intercept.ObjectDefinitionSource obtainObjectDefinitionSource()

Specified by:

obtainObjectDefinitionSource in class org.springframework.security.intercept.AbstractSecurityInterceptor

postProcess

public flex.messaging.messages.Message postProcess(MessageProcessingContext context,
                                                   flex.messaging.messages.Message inputMessage,
                                                   flex.messaging.messages.Message outputMessage)

Hook for post-processing the outgoing AMF Message

Specified by:

postProcess in interface MessageInterceptor

Parameters:

context - context for the current request

inputMessage - the incoming AMF message

outputMessage - the outgoing AMF message

Returns:

the AMF message to send in response

preProcess

public flex.messaging.messages.Message preProcess(MessageProcessingContext context,
                                                  flex.messaging.messages.Message inputMessage)

Hook for pre-processing the incoming AMF Message

Specified by:

preProcess in interface MessageInterceptor

Parameters:

context - context for the current request

inputMessage - the incoming AMF message

Returns:

the AMF message to process in the current request

setObjectDefinitionSource

public void setObjectDefinitionSource(EndpointDefinitionSource newSource)

Sets the EndpointDefinitionSource for the endpoint being secured

Parameters:

newSource - the endpoint definition source