org.springframework.flex.security3

Class EndpointInterceptor

java.lang.Object

org.springframework.security.access.intercept.AbstractSecurityInterceptor

org.springframework.flex.security3.EndpointInterceptor

All Implemented Interfaces:

Aware, InitializingBean, ApplicationEventPublisherAware, MessageSourceAware, MessageInterceptor

public class EndpointInterceptor
extends AbstractSecurityInterceptor
implements MessageInterceptor

Security interceptor that secures messages being passed to BlazeDS endpoints based on the security attributes configured for the endpoint being invoked.

Author:

Jeremy Grelle

Field Summary

Fields inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor

logger, messages

Constructor Summary

Constructors

Constructor and Description
EndpointInterceptor()

Method Summary

Methods

Modifier and Type	Method and Description
void	afterPropertiesSet()
EndpointSecurityMetadataSource	getObjectDefinitionSource()
Class<?>	getSecureObjectClass()
SecurityMetadataSource	obtainSecurityMetadataSource()
flex.messaging.messages.Message	postProcess(MessageProcessingContext context, flex.messaging.messages.Message inputMessage, flex.messaging.messages.Message outputMessage) Hook for post-processing the outgoing AMF Message
flex.messaging.messages.Message	preProcess(MessageProcessingContext context, flex.messaging.messages.Message inputMessage) Hook for pre-processing the incoming AMF Message
void	setObjectDefinitionSource(EndpointSecurityMetadataSource newSource) Sets the EndpointSecurityMetadataSource for the endpoint being secured

Methods inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor

afterInvocation, beforeInvocation, finallyInvocation, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isAlwaysReauthenticate, isRejectPublicInvocations, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setAlwaysReauthenticate, setApplicationEventPublisher, setAuthenticationManager, setMessageSource, setPublishAuthorizationSuccess, setRejectPublicInvocations, setRunAsManager, setValidateConfigAttributes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EndpointInterceptor

public EndpointInterceptor()

Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Specified by:

afterPropertiesSet in interface InitializingBean

Overrides:

afterPropertiesSet in class AbstractSecurityInterceptor

Throws:

Exception

getObjectDefinitionSource

public EndpointSecurityMetadataSource getObjectDefinitionSource()

getSecureObjectClass

public Class<?> getSecureObjectClass()

Specified by:

getSecureObjectClass in class AbstractSecurityInterceptor

obtainSecurityMetadataSource

public SecurityMetadataSource obtainSecurityMetadataSource()

Specified by:

obtainSecurityMetadataSource in class AbstractSecurityInterceptor

postProcess

public flex.messaging.messages.Message postProcess(MessageProcessingContext context,
                                          flex.messaging.messages.Message inputMessage,
                                          flex.messaging.messages.Message outputMessage)

Hook for post-processing the outgoing AMF Message

Specified by:

postProcess in interface MessageInterceptor

Parameters:

context - context for the current request

inputMessage - the incoming AMF message

outputMessage - the outgoing AMF message

Returns:

the AMF message to send in response

preProcess

public flex.messaging.messages.Message preProcess(MessageProcessingContext context,
                                         flex.messaging.messages.Message inputMessage)

Hook for pre-processing the incoming AMF Message

Specified by:

preProcess in interface MessageInterceptor

Parameters:

context - context for the current request

inputMessage - the incoming AMF message

Returns:

the AMF message to process in the current request

setObjectDefinitionSource

public void setObjectDefinitionSource(EndpointSecurityMetadataSource newSource)

Sets the EndpointSecurityMetadataSource for the endpoint being secured

Parameters:

newSource - the endpoint definition source