org.finra.herd.app.security

Interface ApplicationUserBuilder

All Known Implementing Classes:

HttpHeaderApplicationUserBuilder, TrustedApplicationUserBuilder

public interface ApplicationUserBuilder

A builder that knows how to build an application user.

Method Summary

Modifier and Type	Method and Description
ApplicationUser	build(javax.servlet.http.HttpServletRequest request) Builds an application user from the headers contained within the HTTP servlet request.
ApplicationUser	buildNoRoles(javax.servlet.http.HttpServletRequest request) Builds a user object without the roles from the headers contained within the HTTP servlet request.

Method Detail

build

ApplicationUser build(javax.servlet.http.HttpServletRequest request)

Builds an application user from the headers contained within the HTTP servlet request.

Parameters:

request - the HTTP servlet request.

Returns:

the application user.

buildNoRoles

ApplicationUser buildNoRoles(javax.servlet.http.HttpServletRequest request)

Builds a user object without the roles from the headers contained within the HTTP servlet request. This method provides a security filter the ability to compare the current header's username or session Id and session init time with the previous requests version to see if a different user is logged in. Building the entire user would also work, but that could be expensive (e.g. role lookups could come from LDAP).

Parameters:

request - the HTTP servlet request.

Returns:

the application user without roles present.