All Classes and Interfaces
Class
Description
Used to indicates a rest controller method :
which
AccessControlType must be considered by the AccessControlAspect
which TokenExtractionMode to be used to get the tokensThe aspect responsible for controlling the access to a RESTFul API
The
The access control is delegated to the @{link AccessController}
The
AccessControlType is declared with the AccessControl AnnotationThe access control is delegated to the @{link AccessController}
This class will :
Extract the token with @{link TokenExtractor}
Give a security context with the
SecurityContextProviderDifferent Access control types provided by annotation
AccessControl
PUBLIC : no control should be done
ANONYMOUS : the only secretKey will be checked
PRIVATE : both secretKey and token will be checkedimlementation of a
TokenEncoder that uses an AesJsonObjectEncoderimlementation of a
TokenEncoder that uses an AesJsonObjectEncoderThis exception is thrown if you try to bind a security context if there is already one
imlementation of a
TokenEncoder that uses an ObjectEncoderimlementation of a
TokenEncoder that uses an ObjectEncoderImplementation of
SecurityContextProvider based on the use of :
a SecurityContextHolder which is based on ThreadLocal
a TokenDecoder
a TokenVerifier
a SecurityContextExtractor
a SecurityContextValidatorThrown if your token does not enable to retrieve valid credentials
If you try to access a security context and there is no one
Extracts context from the Token
A security context is handled by a ThreadLocal
Responsible for Providing a security context given a user token
Responsible for context validation.
used to decode a Token from a String
used to encode a Token to a String
Different Token extraction modes provided by annotation
AccessControl
HEADER : Token are passed through header (default mode)
COOKIE : Token are given by cookies (useful for images to be displayed in html)To define an interface linked with a factory
TokenExtractorFactoryChooses the correct tokens extractor depending on the
TokenExtractionModeTo extract tokens from Servlet request cookies
To extract tokens from Servlet request headers
Thrown if your token does not enable to retrieve valid credentials