Java Status.UNAUTHORIZED屬性代碼示例

@Override
    public ContainerRequest filter(ContainerRequest containerRequest) throws WebApplicationException {

//        String method = containerRequest.getMethod();
//        String path = containerRequest.getPath(true);
 
        String auth = containerRequest.getHeaderValue("authorization");
        if(auth == null){
            throw new WebApplicationException(Status.UNAUTHORIZED);
        }
 
        String[] credentials = decode(auth);
 
        if(credentials == null || credentials.length != 2){
            throw new WebApplicationException(Status.UNAUTHORIZED);
        }
 
        String uid = UserAuthentication.authenticate(credentials[0], credentials[1]);
 
        if(uid == null){
            throw new WebApplicationException(Status.UNAUTHORIZED);
        }
 
        containerRequest.getRequestHeaders().add("uid", uid);
        
        return containerRequest;
    }
 

protected String getAuthenticatedUser(SecurityContext securityContext) {
    String user = null;
    if (securityContext.getUserPrincipal() != null) {
        user = securityContext.getUserPrincipal().getName();
    } else {
        throw new WebApplicationException(Status.UNAUTHORIZED);
    }
    LOGGER.debug("Authenticated user is: " + user);
    return user;
}
 

/**
 * Build an authentication error response
 * @param schemes Optional allowed authentication schemes
 * @param errorCode Optional error code
 * @param errorDescription Optional error description
 * @param statusCode HTTP status code
 * @param realmName Optional realm name
 * @return Authentication error response
 */
public static Response buildAuthenticationErrorResponse(String[] schemes, String errorCode, String errorDescription,
		int statusCode, String realmName) {

	// status
	Status status = Status.UNAUTHORIZED;
	if (statusCode > 0) {
		Status errorStatus = Status.fromStatusCode(statusCode);
		if (errorStatus != null) {
			status = errorStatus;
		}
	}

	// response
	ResponseBuilder responseBuilder = Response.status(status);

	if (schemes != null && schemes.length > 0) {
		for (String scheme : schemes) {
			responseBuilder.header(HttpHeaders.WWW_AUTHENTICATE,
					buildAuthenticationErrorHeader(scheme, errorCode, errorDescription, realmName));
		}
	}

	// response
	return responseBuilder.header(HttpHeaders.CACHE_CONTROL, "no-store").header(HttpHeaders.PRAGMA, "no-cache")
			.build();
}
 

@POST
@Path("/{uuid}/lock")
@ApiOperation(value = "Lock taxonomy")
public Response lockTaxonomy(
	@ApiParam(value = "Taxonomy uuid", required = true) @PathParam("uuid") String taxonomyUuid)
{
	try
	{
		final Taxonomy taxonomy = ensureTaxonomy(taxonomyUuid, PrivCheck.EDIT);
		lockingService.lockEntity(taxonomy);
	}
	catch( LockedException ex )
	{
		if( CurrentUser.getUserID().equals(ex.getUserID()) )
		{
			throw new WebApplicationException(
				"Taxonomy is locked in a different session.  Call unlockTaxonomy with a force parameter value of true.",
				Status.UNAUTHORIZED);
		}
		else
		{
			throw new WebApplicationException("Taxonomy is locked by another user: " + ex.getUserID(),
				Status.UNAUTHORIZED);
		}
	}
	return Response.ok().build();
}
 

@DELETE
@Path("/{uuid}/lock")
@Produces("application/json")
@ApiOperation(value = "unlock taxonomy")
public Response unlockTaxonomy(
	@ApiParam(value = "Taxonomy uuid", required = true) @PathParam("uuid") String taxonomyUuid,
	@ApiParam(value = "force unlock", required = false) @QueryParam("force") boolean force)
{
	try
	{
		final Taxonomy taxonomy = ensureTaxonomy(taxonomyUuid, PrivCheck.EDIT);
		lockingService.unlockEntity(taxonomy, force);
	}
	catch( LockedException ex )
	{
		if( CurrentUser.getUserID().equals(ex.getUserID()) )
		{
			throw new WebApplicationException(
				"Taxonomy is locked in a different session.  Call unlockTaxonomy with a force parameter value of true.",
				Status.UNAUTHORIZED);
		}
		else
		{
			throw new WebApplicationException(
				"You do not own the lock on this taxonomy.  It is held by user ID " + ex.getUserID(),
				Status.UNAUTHORIZED);
		}
	}
	return Response.ok().build();

}
 

@Override
public Response toResponse(AccessDeniedException exception) {
    // get the current user
    NiFiUser user = NiFiUserUtils.getNiFiUser();

    // if the user was authenticated - forbidden, otherwise unauthorized... the user may be null if the
    // AccessDeniedException was thrown from a /access endpoint that isn't subject to the security
    // filter chain. for instance, one that performs kerberos negotiation
    final Status status;
    if (user == null || user.isAnonymous()) {
        status = Status.UNAUTHORIZED;
    } else {
        status = Status.FORBIDDEN;
    }

    final String identity;
    if (user == null) {
        identity = "<no user found>";
    } else {
        identity = user.toString();
    }

    logger.info(String.format("%s does not have permission to access the requested resource. %s Returning %s response.", identity, exception.getMessage(), status));

    if (logger.isDebugEnabled()) {
        logger.debug(StringUtils.EMPTY, exception);
    }

    return Response.status(status)
            .entity(String.format("%s Contact the system administrator.", exception.getMessage()))
            .type("text/plain")
            .build();
}
 

private void checkAccess(Job job, HttpServletRequest request) {
  if (!hasAccess(job, request)) {
    throw new WebApplicationException(Status.UNAUTHORIZED);
  }
}
 

/**
 * Creates a builder for a unauthorized request
 * 
 * @return the exception builder
 */
public static ExceptionBuilder unauthorized() {
    return new ExceptionBuilder(Status.UNAUTHORIZED);
}
 

/**
 * check for job access.
 *
 * @param job
 *          the job that is being accessed
 */
void checkAccess(Job job, HttpServletRequest request) {
  if (!hasAccess(job, request)) {
    throw new WebApplicationException(Status.UNAUTHORIZED);
  }
}