leap.web.security

类 DefaultSecurityHandler

java.lang.Object

leap.web.security.DefaultSecurityHandler

所有已实现的接口:

SecurityHandler

public class DefaultSecurityHandler
extends Object
implements SecurityHandler

字段概要

字段

限定符和类型	字段和说明
protected AuthenticationManager	authcManager
protected AuthorizationManager	authzManager
protected SecurityConfig	config
protected LoginManager	loginManager
protected LogoutManager	logoutManager

构造器概要

构造器

构造器和说明
DefaultSecurityHandler()

方法概要

限定符和类型	方法和说明
boolean	checkAuthentication(Request request, Response response, SecurityContextHolder context) Checks the authentication is allowed.
boolean	checkAuthorization(Request request, Response response, SecurityContextHolder context) Checks the authorization is allowed.
void	handleAuthenticationDenied(Request request, Response response, SecurityContextHolder context) Handles if current authentication has no permission to access the resource.
void	handleAuthorizationDenied(Request request, Response response, SecurityContextHolder context) Handles if current authorization has no permission to access the resource.
boolean	handleLoginRequest(Request request, Response response, SecurityContextHolder context) Handles login request.
boolean	handleLogoutRequest(Request request, Response response, SecurityContextHolder context) Handles logout request Returns true if handled.
leap.core.security.Authentication	resolveAuthentication(Request request, Response response, SecurityContextHolder context) Resolves the Authentication from current request.
leap.core.security.Authorization	resolveAuthorization(Request request, Response response, SecurityContextHolder context) Resolves the Authorization from current request and Authentication.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

config

protected SecurityConfig config

authcManager

protected AuthenticationManager authcManager

authzManager

protected AuthorizationManager authzManager

loginManager

protected LoginManager loginManager

logoutManager

protected LogoutManager logoutManager

构造器详细资料

DefaultSecurityHandler

public DefaultSecurityHandler()

方法详细资料

resolveAuthentication

public leap.core.security.Authentication resolveAuthentication(Request request,
                                                               Response response,
                                                               SecurityContextHolder context)
                                                        throws Throwable

从接口复制的说明: SecurityHandler

Resolves the Authentication from current request.

Returns an Authentication object represents the authentication result.

Returns null if no authentication resolved.

指定者:

resolveAuthentication 在接口中 SecurityHandler

抛出:

Throwable

resolveAuthorization

public leap.core.security.Authorization resolveAuthorization(Request request,
                                                             Response response,
                                                             SecurityContextHolder context)
                                                      throws Throwable

从接口复制的说明: SecurityHandler

Resolves the Authorization from current request and Authentication.

Returns an Authorization object represents the authorization result.

Returns null if no authorization resolved.

指定者:

resolveAuthorization 在接口中 SecurityHandler

抛出:

Throwable

checkAuthentication

public boolean checkAuthentication(Request request,
                                   Response response,
                                   SecurityContextHolder context)
                            throws Throwable

从接口复制的说明: SecurityHandler

Checks the authentication is allowed.

Returns true if allowed.

指定者:

checkAuthentication 在接口中 SecurityHandler

抛出:

Throwable

checkAuthorization

public boolean checkAuthorization(Request request,
                                  Response response,
                                  SecurityContextHolder context)
                           throws Throwable

从接口复制的说明: SecurityHandler

Checks the authorization is allowed.

Returns true if allowed.

指定者:

checkAuthorization 在接口中 SecurityHandler

抛出:

Throwable

handleAuthenticationDenied

public void handleAuthenticationDenied(Request request,
                                       Response response,
                                       SecurityContextHolder context)
                                throws Throwable

从接口复制的说明: SecurityHandler

Handles if current authentication has no permission to access the resource.

指定者:

handleAuthenticationDenied 在接口中 SecurityHandler

抛出:

Throwable

handleAuthorizationDenied

public void handleAuthorizationDenied(Request request,
                                      Response response,
                                      SecurityContextHolder context)
                               throws Throwable

从接口复制的说明: SecurityHandler

Handles if current authorization has no permission to access the resource.

指定者:

handleAuthorizationDenied 在接口中 SecurityHandler

抛出:

Throwable

handleLoginRequest

public boolean handleLoginRequest(Request request,
                                  Response response,
                                  SecurityContextHolder context)
                           throws Throwable

从接口复制的说明: SecurityHandler

Handles login request.

Returns true if handled.

指定者:

handleLoginRequest 在接口中 SecurityHandler

抛出:

Throwable

handleLogoutRequest

public boolean handleLogoutRequest(Request request,
                                   Response response,
                                   SecurityContextHolder context)
                            throws Throwable

从接口复制的说明: SecurityHandler

Handles logout request

Returns true if handled.

指定者:

handleLogoutRequest 在接口中 SecurityHandler

抛出:

Throwable