leap.web.security

接口 SecurityHandler

所有已知实现类:

DefaultSecurityHandler

public interface SecurityHandler

方法概要

限定符和类型	方法和说明
boolean	checkAuthentication(Request request, Response response, SecurityContextHolder context) Checks the authentication is allowed.
boolean	checkAuthorization(Request request, Response response, SecurityContextHolder context) Checks the authorization is allowed.
void	handleAuthenticationDenied(Request request, Response response, SecurityContextHolder context) Handles if current authentication has no permission to access the resource.
void	handleAuthorizationDenied(Request request, Response response, SecurityContextHolder context) Handles if current authorization has no permission to access the resource.
boolean	handleLoginRequest(Request request, Response response, SecurityContextHolder context) Handles login request.
boolean	handleLogoutRequest(Request request, Response response, SecurityContextHolder context) Handles logout request Returns true if handled.
leap.core.security.Authentication	resolveAuthentication(Request request, Response response, SecurityContextHolder context) Resolves the Authentication from current request.
leap.core.security.Authorization	resolveAuthorization(Request request, Response response, SecurityContextHolder context) Resolves the Authorization from current request and Authentication.

方法详细资料

resolveAuthentication

leap.core.security.Authentication resolveAuthentication(Request request,
                                                        Response response,
                                                        SecurityContextHolder context)
                                                 throws Throwable

Resolves the Authentication from current request.

Returns an Authentication object represents the authentication result.

Returns null if no authentication resolved.

抛出:

Throwable

resolveAuthorization

leap.core.security.Authorization resolveAuthorization(Request request,
                                                      Response response,
                                                      SecurityContextHolder context)
                                               throws Throwable

Resolves the Authorization from current request and Authentication.

Returns an Authorization object represents the authorization result.

Returns null if no authorization resolved.

抛出:

Throwable

checkAuthentication

boolean checkAuthentication(Request request,
                            Response response,
                            SecurityContextHolder context)
                     throws Throwable

Checks the authentication is allowed.

Returns true if allowed.

抛出:

Throwable

handleAuthenticationDenied

void handleAuthenticationDenied(Request request,
                                Response response,
                                SecurityContextHolder context)
                         throws Throwable

Handles if current authentication has no permission to access the resource.

抛出:

Throwable

checkAuthorization

boolean checkAuthorization(Request request,
                           Response response,
                           SecurityContextHolder context)
                    throws Throwable

Checks the authorization is allowed.

Returns true if allowed.

抛出:

Throwable

handleAuthorizationDenied

void handleAuthorizationDenied(Request request,
                               Response response,
                               SecurityContextHolder context)
                        throws Throwable

Handles if current authorization has no permission to access the resource.

抛出:

Throwable

handleLoginRequest

boolean handleLoginRequest(Request request,
                           Response response,
                           SecurityContextHolder context)
                    throws Throwable

Handles login request.

Returns true if handled.

抛出:

Throwable

handleLogoutRequest

boolean handleLogoutRequest(Request request,
                            Response response,
                            SecurityContextHolder context)
                     throws Throwable

Handles logout request

Returns true if handled.

抛出:

Throwable