org.springframework.flex.security3
Class EndpointSecurityMetadataSource

java.lang.Object
  org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
      org.springframework.flex.security3.EndpointSecurityMetadataSource

All Implemented Interfaces:

org.springframework.aop.framework.AopInfrastructureBean, org.springframework.security.access.SecurityMetadataSource, org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource

public class EndpointSecurityMetadataSource
extends org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

Implementation of SecurityMetadataSource for BlazeDS Endpoints.

This implementation is capable of securing Endpoints both by their channel id, and by their URL pattern.

Author:

Jeremy Grelle

Field Summary

Fields inherited from class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

logger

Constructor Summary

EndpointSecurityMetadataSource(org.springframework.security.web.util.UrlMatcher urlMatcher, java.util.LinkedHashMap<org.springframework.security.web.access.intercept.RequestKey,java.util.Collection<org.springframework.security.access.ConfigAttribute>> requestMap)

EndpointSecurityMetadataSource(org.springframework.security.web.util.UrlMatcher urlMatcher, java.util.LinkedHashMap<org.springframework.security.web.access.intercept.RequestKey,java.util.Collection<org.springframework.security.access.ConfigAttribute>> requestMap, java.util.HashMap<java.lang.String,java.util.Collection<org.springframework.security.access.ConfigAttribute>> endpointMap)
Builds the internal request map from the supplied map, and stores the endpoint map for matching by channel id.

Method Summary

java.util.Collection<org.springframework.security.access.ConfigAttribute>	getAllConfigAttributes()
java.util.Collection<org.springframework.security.access.ConfigAttribute>	getAttributes(java.lang.Object object)
boolean	supports(java.lang.Class<?> clazz)

Methods inherited from class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

getUrlMatcher, isConvertUrlToLowercaseBeforeComparison, lookupAttributes, setStripQueryStringFromUrls

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EndpointSecurityMetadataSource

public EndpointSecurityMetadataSource(org.springframework.security.web.util.UrlMatcher urlMatcher,
                                      java.util.LinkedHashMap<org.springframework.security.web.access.intercept.RequestKey,java.util.Collection<org.springframework.security.access.ConfigAttribute>> requestMap)

See Also:

DefaultFilterInvocationDefinitionSource#DefaultFilterInvocationDefinitionSource(UrlMatcher, LinkedHashMap)

EndpointSecurityMetadataSource

public EndpointSecurityMetadataSource(org.springframework.security.web.util.UrlMatcher urlMatcher,
                                      java.util.LinkedHashMap<org.springframework.security.web.access.intercept.RequestKey,java.util.Collection<org.springframework.security.access.ConfigAttribute>> requestMap,
                                      java.util.HashMap<java.lang.String,java.util.Collection<org.springframework.security.access.ConfigAttribute>> endpointMap)

Builds the internal request map from the supplied map, and stores the endpoint map for matching by channel id.

Parameters:

endpointMap - map of >

See Also:

DefaultFilterInvocationDefinitionSource#DefaultFilterInvocationDefinitionSource(UrlMatcher, LinkedHashMap)

Method Detail

getAttributes

public java.util.Collection<org.springframework.security.access.ConfigAttribute> getAttributes(java.lang.Object object)
                                                                                        throws java.lang.IllegalArgumentException

Specified by:

getAttributes in interface org.springframework.security.access.SecurityMetadataSource

Overrides:

getAttributes in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

Throws:

java.lang.IllegalArgumentException

getAllConfigAttributes

public java.util.Collection<org.springframework.security.access.ConfigAttribute> getAllConfigAttributes()

Specified by:

getAllConfigAttributes in interface org.springframework.security.access.SecurityMetadataSource

Overrides:

getAllConfigAttributes in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

supports

public boolean supports(java.lang.Class<?> clazz)

Specified by:

supports in interface org.springframework.security.access.SecurityMetadataSource

Overrides:

supports in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource