Java Authorizer类代码示例

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
private <C extends Credentials, U extends CommonProfile> Pac4j clientInternal(String pattern,
    Function<Config, Client<C, U>> provider, Authorizer<U> authorizer) {
  clients.add((conf, binder) -> {
    Client<C, U> client = provider.apply(conf);
    String authorizerName = null;
    if (authorizer != null) {
      authorizerName = authorizerName(authorizer);
      pac4j.addAuthorizer(authorizerName, authorizer);
    }
    Pac4jClientType.profileTypes(Pac4jClientType.clientType(client.getClass()), profile -> {
      if (profileTypes.add(profile)) {
        binder
            .bind(profile)
            .toProvider(Providers.outOfScope(profile))
            .in(RequestScoped.class);
      }
    });
    return new ClientConfig(pattern, authorizerName, client);
  });
  return this;
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
private MockUnit.Block guiceAuthorizers(Class<? extends Authorizer>... authorizers) {
  return unit -> {
    Map<String, Authorizer> hash = Arrays.asList(authorizers).stream()
        .map(it -> unit.get(it))
        .collect(Collectors.toMap(it -> it.getClass().getSimpleName(), Function.identity()));
    org.pac4j.core.config.Config pac4j = unit.get(org.pac4j.core.config.Config.class);
    expect(pac4j.getAuthorizers()).andReturn(hash);

    Env env = unit.get(Env.class);
    expect(env.onStart(unit.capture(Throwing.Consumer.class))).andReturn(env);
    hash.values().stream()
        .filter(Pac4jAuthorizer.class::isInstance)
        .map(Pac4jAuthorizer.class::cast)
        .forEach(it -> expect(it.setRegistry(unit.get(Registry.class))).andReturn(it));
  };
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testOneExistingAuthorizerProfileMatch() throws HttpAction {
    profile.setId(VALUE);
    final Map<String, Authorizer> authorizers = new HashMap<>();
    authorizers.put(NAME, new IdAuthorizer());
    assertTrue(checker.isAuthorized(null, profiles, NAME, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testTwoExistingAuthorizerProfileMatch() throws HttpAction {
    profile.setId(VALUE);
    profile.addRole(ROLE);
    final Map<String, Authorizer> authorizers = new HashMap<>();
    authorizers.put(NAME, new IdAuthorizer());
    authorizers.put(VALUE, new RequireAnyRoleAuthorizer(ROLE));
    assertTrue(checker.isAuthorized(null, profiles, NAME + Pac4jConstants.ELEMENT_SEPRATOR + VALUE, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testTwoExistingAuthorizerProfileDoesNotMatch() throws HttpAction {
    profile.addRole(ROLE);
    final Map<String, Authorizer> authorizers = new HashMap<>();
    authorizers.put(NAME, new IdAuthorizer());
    authorizers.put(VALUE, new RequireAnyRoleAuthorizer(ROLE));
    assertFalse(checker.isAuthorized(null, profiles, NAME + Pac4jConstants.ELEMENT_SEPRATOR + VALUE, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testOneExistingAuthorizerProfileMatch2() throws HttpAction {
    profile.setId(VALUE);
    final List<Authorizer> authorizers = new ArrayList<>();
    authorizers.add(new IdAuthorizer());
    assertTrue(checker.isAuthorized(null, profiles, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testTwoExistingAuthorizerProfileMatch2() throws HttpAction {
    profile.setId(VALUE);
    profile.addRole(ROLE);
    final List<Authorizer> authorizers = new ArrayList<>();
    authorizers.add(new IdAuthorizer());
    authorizers.add(new RequireAnyRoleAuthorizer(ROLE));
    assertTrue(checker.isAuthorized(null, profiles, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Test
public void testTwoExistingAuthorizerProfileDoesNotMatch2() throws HttpAction {
    profile.addRole(ROLE);
    final List<Authorizer> authorizers = new ArrayList<>();
    authorizers.add(new IdAuthorizer());
    authorizers.add(new RequireAnyRoleAuthorizer(ROLE));
    assertFalse(checker.isAuthorized(null, profiles, authorizers));
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Override
public void setup(Bootstrap<?> bootstrap) {
    ObjectMapper om = bootstrap.getObjectMapper();

    // for Config
    om.addMixIn(SessionStore.class, sessionStoreMixin());
    om.addMixIn(Authorizer.class, authorizerMixin());
    om.addMixIn(HttpActionAdapter.class, httpActionAdapterMixin());
    om.addMixIn(Matcher.class, matcherMixin());
    om.addMixIn(SecurityLogic.class, securityLogicMixin());
    om.addMixIn(CallbackLogic.class, callbackLogicMixin());
    om.addMixIn(LogoutLogic.class, logoutLogicMixin());

    // for Clients
    om.addMixIn(Client.class, clientMixin());
    om.addMixIn(BaseClient.class, baseClientMixin());

    // for Clients and Client subsclasses
    om.addMixIn(AjaxRequestResolver.class, ajaxRequestResolverMixin());
    om.addMixIn(UrlResolver.class, urlResolverMixin());
    om.addMixIn(AuthorizationGenerator.class,
            authorizationGeneratorMixin());

    // for Client/BaseClient
    om.addMixIn(Authenticator.class, authenticatorMixin());
    om.addMixIn(CredentialsExtractor.class, credentialExtractorMixin());
    om.addMixIn(ProfileCreator.class, profileCreatorMixin());

    // for IndirectClient
    om.addMixIn(RedirectActionBuilder.class, redirectActionBuilderMixin());
    om.addMixIn(LogoutActionBuilder.class, logoutActionBuilderMixin());
    
    // for some of the Authenticators
    om.addMixIn(PasswordEncoder.class, passwordEncoderMixin());
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@SuppressWarnings("rawtypes")
@Override
public void handle(final Request req, final Response rsp) throws Exception {
  CommonProfile user = req.require(CommonProfile.class);
  Config config = req.require(Config.class);
  WebContext ctx = req.require(WebContext.class);
  AuthorizationChecker authorizationChecker = req.require(AuthorizationChecker.class);
  Map<String, Authorizer> authorizers = config.getAuthorizers();
  log.debug("checking access for: {}", user);
  if (!authorizationChecker.isAuthorized(ctx, Arrays.asList(user), this.authorizer, authorizers)) {
    log.debug("forbidden: {}", user);
    throw new Err(Status.FORBIDDEN);
  }
  log.debug("authorized: {}", user);
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@SuppressWarnings("rawtypes")
@Inject
public ConfigProvider(final Clients clients, final Map<String, Authorizer> authorizers) {
  config = new Config(clients);
  for (Entry<String, Authorizer> entry : authorizers.entrySet()) {
    config.addAuthorizer(entry.getKey(), entry.getValue());
  }
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
@Bean
public Authorizer requireAnyRoleAuthorizer() {
    return new RequireAnyRoleAuthorizer(casProperties.getMgmt().getAdminRoles());
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
private void addSingleAuthorizerToConfig(Authorizer<WebContext, CommonProfile> syncAuthorizer) {
    final Map<String, AsyncAuthorizer<CommonProfile>> authorizersMap = new HashMap<>();
    authorizersMap.put(NAME, AsyncAuthorizer.fromNonBlockingAuthorizer(syncAuthorizer));
    when(config.getAuthorizers()).thenReturn(authorizersMap);
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
public Config(final Map<String, Authorizer> authorizers) {
    setAuthorizers(authorizers);
}
 

import org.pac4j.core.authorization.authorizer.Authorizer; //导入依赖的package包/类
public Map<String, Authorizer> getAuthorizers() {
    return authorizers;
}