| Modifier and Type | Method and Description |
|---|---|
protected boolean |
RequireAnyRoleAuthorizer.check(WebContext context,
U profile,
String element) |
protected boolean |
RequireAnyPermissionAuthorizer.check(WebContext context,
U profile,
String element) |
protected boolean |
RequireAllRolesAuthorizer.check(WebContext context,
U profile,
String element) |
protected boolean |
RequireAllPermissionsAuthorizer.check(WebContext context,
U profile,
String element) |
boolean |
Authorizer.isAuthorized(WebContext context,
U profile)
Checks if the user profile is authorized for the current web context.
|
boolean |
DefaultAuthorizationChecker.isAuthorized(WebContext context,
UserProfile profile,
List<Authorizer> authorizers) |
boolean |
AuthorizationChecker.isAuthorized(WebContext context,
UserProfile profile,
List<Authorizer> authorizers) |
boolean |
DefaultAuthorizationChecker.isAuthorized(WebContext context,
UserProfile profile,
String authorizerName,
Map<String,Authorizer> authorizersMap) |
boolean |
AuthorizationChecker.isAuthorized(WebContext context,
UserProfile profile,
String authorizerName,
Map<String,Authorizer> authorizersMap) |
| Modifier and Type | Method and Description |
|---|---|
protected boolean |
CheckProfileTypeAuthorizer.check(WebContext context,
U profile,
Class<U> element) |
protected abstract boolean |
AbstractRequireElementAuthorizer.check(WebContext context,
U profile,
E element) |
protected boolean |
CheckHttpMethodAuthorizer.check(WebContext context,
U profile,
HttpConstants.HTTP_METHOD element) |
boolean |
AbstractRequireAnyAuthorizer.isAuthorized(WebContext context,
U profile) |
boolean |
AbstractRequireAllAuthorizer.isAuthorized(WebContext context,
U profile) |
boolean |
XSSProtectionHeader.isAuthorized(WebContext context,
UserProfile profile) |
boolean |
XFrameOptionsHeader.isAuthorized(WebContext context,
UserProfile profile) |
boolean |
XContentTypeOptionsHeader.isAuthorized(WebContext context,
UserProfile profile) |
boolean |
StrictTransportSecurityHeader.isAuthorized(WebContext context,
UserProfile profile) |
boolean |
CustomSecurityHeader.isAuthorized(WebContext context,
UserProfile profile) |
boolean |
CacheControlHeader.isAuthorized(WebContext context,
UserProfile profile) |
| Modifier and Type | Method and Description |
|---|---|
String |
DefaultCsrfTokenGenerator.get(WebContext context) |
String |
CsrfTokenGenerator.get(WebContext context)
Get the CSRF token from the session or create it if it doesn't exist.
|
boolean |
CsrfAuthorizer.isAuthorized(WebContext context,
U profile) |
boolean |
CsrfTokenGeneratorAuthorizer.isAuthorized(WebContext context,
UserProfile profile) |
| Modifier and Type | Method and Description |
|---|---|
String |
IndirectClient.computeFinalCallbackUrl(WebContext context) |
List<Client> |
DefaultClientFinder.find(Clients clients,
WebContext context,
String clientName) |
List<Client> |
ClientFinder.find(Clients clients,
WebContext context,
String clientName) |
Client |
Clients.findClient(WebContext context)
Return the right client according to the web context.
|
C |
IndirectClient.getCredentials(WebContext context)
Get the credentials from the web context.
|
C |
Client.getCredentials(WebContext context)
Get the credentials from the web context.
|
RedirectAction |
IndirectClient.getRedirectAction(WebContext context,
boolean protectedTarget)
Get the redirectAction computed for this client.
|
String |
IndirectClient.getRedirectionUrl(WebContext context)
Return the redirection url to the provider, requested from an anonymous page.
|
protected String |
IndirectClient.getStateParameter(WebContext webContext)
Return the state parameter required by some security protocols like SAML or OAuth.
|
U |
Client.getUserProfile(C credentials,
WebContext context)
Get the user profile based on the provided credentials.
|
U |
BaseClient.getUserProfile(C credentials,
WebContext context)
Get the user profile based on the provided credentials.
|
void |
IndirectClient.redirect(WebContext context,
boolean protectedTarget)
Redirect to the authentication provider by updating the WebContext accordingly.
|
void |
DirectClient.redirect(WebContext context,
boolean protectedTarget) |
void |
Client.redirect(WebContext context,
boolean protectedTarget)
Redirect to the authentication provider for an indirect client.
|
protected abstract C |
IndirectClient.retrieveCredentials(WebContext context) |
protected abstract RedirectAction |
IndirectClient.retrieveRedirectAction(WebContext context) |
protected abstract U |
BaseClient.retrieveUserProfile(C credentials,
WebContext context) |
| Modifier and Type | Class and Description |
|---|---|
class |
BaseResponseContext
This class implements the methods related to the response as a POJO.
|
class |
J2EContext
This implementation uses the J2E request, response and session.
|
class |
J2ERequestContext
Deprecated.
|
| Modifier and Type | Method and Description |
|---|---|
static Cookie |
ContextHelper.getCookie(WebContext context,
String name)
Get a specific cookie by its name.
|
static boolean |
ContextHelper.isHttp(WebContext context)
Whether the request is HTTP.
|
static boolean |
ContextHelper.isHttps(WebContext context)
Whether the request is HTTPS.
|
static boolean |
ContextHelper.isHttpsOrSecure(WebContext context)
Whether the request is HTTPS or secure.
|
static boolean |
ContextHelper.isPost(WebContext context)
Whether it is a POST request.
|
| Modifier and Type | Method and Description |
|---|---|
Object |
SessionStore.get(WebContext context,
String key)
Get the object from its key in store.
|
Object |
J2ESessionStore.get(WebContext context,
String key) |
String |
SessionStore.getOrCreateSessionId(WebContext context)
Get or create the session identifier and initialize the session with it if necessary.
|
String |
J2ESessionStore.getOrCreateSessionId(WebContext context) |
void |
SessionStore.set(WebContext context,
String key,
Object value)
Save an object in the store by its key.
|
void |
J2ESessionStore.set(WebContext context,
String key,
Object value) |
| Modifier and Type | Method and Description |
|---|---|
static RequiresHttpAction |
RequiresHttpAction.forbidden(String message,
WebContext context)
Build a forbidden response.
|
static RequiresHttpAction |
RequiresHttpAction.ok(String message,
WebContext context)
Build an HTTP Ok.
|
static RequiresHttpAction |
RequiresHttpAction.ok(String message,
WebContext context,
String content)
Build an HTTP Ok.
|
static RequiresHttpAction |
RequiresHttpAction.redirect(String message,
WebContext context,
String url)
Build a redirection.
|
static RequiresHttpAction |
RequiresHttpAction.unauthorized(String message,
WebContext context,
String realmName)
Build a basic auth popup credentials.
|
| Modifier and Type | Method and Description |
|---|---|
Object |
HttpActionAdapter.adapt(int code,
WebContext context)
Adapt the HTTP action.
|
String |
RelativeCallbackUrlResolver.compute(String callbackUrl,
WebContext context) |
String |
DefaultCallbackUrlResolver.compute(String callbackUrl,
WebContext context) |
String |
CallbackUrlResolver.compute(String callbackUrl,
WebContext context)
Compute a new callback url from the defined callback url and the web context.
|
boolean |
DefaultAjaxRequestResolver.isAjax(WebContext context) |
boolean |
AjaxRequestResolver.isAjax(WebContext context)
Whether it is an AJAX request.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
Matcher.matches(WebContext context) |
boolean |
ExcludedPathMatcher.matches(WebContext context) |
boolean |
MatchingChecker.matches(WebContext context,
String matcherName,
Map<String,Matcher> matchersMap) |
boolean |
DefaultMatchingChecker.matches(WebContext context,
String matcherName,
Map<String,Matcher> matchersMap) |
| Modifier and Type | Field and Description |
|---|---|
protected WebContext |
ProfileManager.context |
| Constructor and Description |
|---|
ProfileManager(WebContext context) |
| Modifier and Type | Method and Description |
|---|---|
void |
InitializableWebObject.init(WebContext context)
Initialize the object.
|
protected abstract void |
InitializableWebObject.internalInit(WebContext context)
Internal initialization of the object.
|
void |
InitializableWebObject.reinit(WebContext context)
Force (again) the initialization of the object.
|
Copyright © 2016. All Rights Reserved.