Package org.restheart.security.plugins.authorizers

Class MongoAclAuthorizer

java.lang.Object

org.restheart.security.plugins.authorizers.MongoAclAuthorizer

All Implemented Interfaces:

ConfigurablePlugin, Plugin, Authorizer

public class MongoAclAuthorizer
extends Object
implements Authorizer

Author:

Andrea Di Cesare <andrea@softinstigate.com>

Field Summary

Fields

Modifier and Type	Field	Description
static String	$UNAUTHENTICATED
static String	ACL_COLLECTION_NAME
static io.undertow.util.AttachmentKey<FilterPredicate>	MATCHING_ACL_PREDICATE
static String	MREST_SUPERUSER_ROLE
static String	X_FORWARDED_ACCOUNT_ID
static String	X_FORWARDED_ROLE

Constructor Summary

Constructors

Constructor	Description
MongoAclAuthorizer()

Method Summary

Modifier and Type	Method	Description
boolean	checkAclCollection()
LinkedHashSet<FilterPredicate>	getRoleFilterPredicates(String role)
boolean	isAllowed(Request request)
boolean	isAuthenticationRequired(Request request)
void	setConf(Map<String,Object> args)
void	setMongoClient(com.mongodb.MongoClient mclient)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

X_FORWARDED_ACCOUNT_ID

public static final String X_FORWARDED_ACCOUNT_ID

See Also:

Constant Field Values

X_FORWARDED_ROLE

public static final String X_FORWARDED_ROLE

See Also:

Constant Field Values

MATCHING_ACL_PREDICATE

public static final io.undertow.util.AttachmentKey<FilterPredicate> MATCHING_ACL_PREDICATE

ACL_COLLECTION_NAME

public static final String ACL_COLLECTION_NAME

See Also:

Constant Field Values

MREST_SUPERUSER_ROLE

public static String MREST_SUPERUSER_ROLE

$UNAUTHENTICATED

public static final String $UNAUTHENTICATED

See Also:

Constant Field Values

Constructor Detail

MongoAclAuthorizer

public MongoAclAuthorizer()

Method Detail

setConf

public void setConf(Map<String,Object> args)

setMongoClient

public void setMongoClient(com.mongodb.MongoClient mclient)

isAllowed

public boolean isAllowed(Request request)

Specified by:

isAllowed in interface Authorizer

Parameters:

request -

Returns:

isAuthenticationRequired

public boolean isAuthenticationRequired(Request request)

Specified by:

isAuthenticationRequired in interface Authorizer

getRoleFilterPredicates

public LinkedHashSet<FilterPredicate> getRoleFilterPredicates(String role)

Parameters:

role -

Returns:

the acl

checkAclCollection

public boolean checkAclCollection()