Java SecurityContext.getUserPrincipal方法代碼示例

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/echo")
@RolesAllowed("Echoer")
public String echoInput(@Context SecurityContext sec, @QueryParam("input") String input) {
    Principal user = sec.getUserPrincipal();
    return input + ", user="+user.getName();
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/echoNeedsToken2Role")
@RolesAllowed("Token2Role")
public String echoNeedsToken2Role(@Context SecurityContext sec, @QueryParam("input") String input) {
    Principal user = sec.getUserPrincipal();
    return input + ", user="+user.getName();
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
/**
 * This endpoint requires a Tester role, and also validates that the caller has the role Echoer by calling
 * {@linkplain SecurityContext#isUserInRole(String)}.
 *
 * @return principal name or FORBIDDEN error
 */
@GET
@Path("/checkIsUserInRole")
@RolesAllowed("Tester")
public Response checkIsUserInRole(@Context SecurityContext sec) {
    Principal user = sec.getUserPrincipal();
    Response response;
    if(!sec.isUserInRole("Echoer")) {
        response = Response.status(new Response.StatusType() {
            @Override
            public int getStatusCode() {
                return Response.Status.FORBIDDEN.getStatusCode();
            }

            @Override
            public Response.Status.Family getFamily() {
                return Response.Status.FORBIDDEN.getFamily();
            }

            @Override
            public String getReasonPhrase() {
                return "SecurityContext.isUserInRole(Echoer) was false";
            }
        }).build();
    }
    else {
        response = Response.ok(user.getName(), MediaType.TEXT_PLAIN).build();
    }
    return response;
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/issue")
@Produces(MediaType.TEXT_PLAIN)
public Response issue(@Context SecurityContext securityContext) {

	// get Authentication
	Authentication authc = (Authentication) securityContext.getUserPrincipal();

	// configuration
	JwtConfiguration configuration = ResourceUtils.lookupResource(getClass(), JwtConfiguration.class, providers)
			.orElseThrow(() -> new InternalServerErrorException("JWT configuration not available"));

	// build JWT
	String jwt = JwtTokenBuilder.buildJwtToken(configuration, authc, UUID.randomUUID().toString());
	// ok
	return Response.ok(jwt, MediaType.TEXT_PLAIN).build();

}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/echo2")
@RolesAllowed("NoSuchUser")
public String echoInput2(@Context SecurityContext sec, @QueryParam("input") String input) {
    Principal user = sec.getUserPrincipal();
    String name = user != null ? user.getName() : "<null>";
    return input + ", user="+name;
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
/**
 * Validate that the  SecurityContext#getUserPrincipal is a JsonWebToken
 * @param sec
 * @return
 */
@GET
@Path("/getPrincipalClass")
@RolesAllowed("Tester")
public String getPrincipalClass(@Context SecurityContext sec) {
    Principal user = sec.getUserPrincipal();
    boolean isJsonWebToken = user instanceof JsonWebToken;
    return "isJsonWebToken:"+isJsonWebToken;
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
/**
 * This endpoint requires a role that is mapped to the group1 role
 * @return principal name
 */
@GET
@Path("/needsGroup1Mapping")
@RolesAllowed("Group1MappedRole")
public String needsGroup1Mapping(@Context SecurityContext sec) {
    Principal user = sec.getUserPrincipal();
    sec.isUserInRole("group1");
    return user.getName();
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@ApiOperation(value = "Secure Hello")
@GET
@Produces(MediaType.APPLICATION_JSON)
public JsonObject hello(@QueryParam("name") final String name,
    @Context final SecurityContext securityContext) {

    final JsonObject json = new JsonObject();
    if (name != null) {
        json.add("name", new JsonPrimitive(name));
    }
    final JwtClaimsSetPrincipal userPrincipal = (JwtClaimsSetPrincipal) securityContext.getUserPrincipal();
    json.add("principal", new JsonPrimitive(userPrincipal.getName()));
    json.add("claims", jsonOps.toJsonElement(userPrincipal.getClaimsSet().toJson()));
    return json;
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
protected String getAuthenticatedUser(SecurityContext securityContext) {
    String user = null;
    if (securityContext.getUserPrincipal() != null) {
        user = securityContext.getUserPrincipal().getName();
    } else {
        throw new WebApplicationException(Status.UNAUTHORIZED);
    }
    LOGGER.debug("Authenticated user is: " + user);
    return user;
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@PermitAll
@GET
@Path("name")
@Produces(MediaType.TEXT_PLAIN)
public String info(@Context SecurityContext securityContext) {
	Authentication authc = (Authentication) securityContext.getUserPrincipal();
	return authc.getName();
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
private void checkSecurity(final MinijaxRequestContext context) {
    final Annotation a = context.getResourceMethod().getSecurityAnnotation();
    if (a == null) {
        return;
    }

    final Class<?> c = a.annotationType();
    if (c == PermitAll.class) {
        return;
    }

    if (c == DenyAll.class) {
        throw new ForbiddenException();
    }

    if (c == RolesAllowed.class) {
        final SecurityContext security = context.getSecurityContext();
        if (security == null || security.getUserPrincipal() == null) {
            throw new NotAuthorizedException(Response.status(Status.UNAUTHORIZED).build());
        }

        boolean found = false;
        for (final String role : ((RolesAllowed) a).value()) {
            if (security.isUserInRole(role)) {
                found = true;
                break;
            }
        }

        if (!found) {
            throw new ForbiddenException();
        }
    }
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@PermitAll
@GET
@Path("/roles")
@Produces(MediaType.TEXT_PLAIN)
public String getAccountRoles(@Context SecurityContext securityContext) {
	// get Authentication
	Authentication authc = (Authentication) securityContext.getUserPrincipal();
	// get roles
	return authc.getPermissions().stream().map(p -> p.getPermission().orElse(null))
			.collect(Collectors.joining(","));
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/forall")
public User secureForAll(@Context SecurityContext context) {
    return (User) context.getUserPrincipal();
}
 

import javax.ws.rs.core.SecurityContext; //導入方法依賴的package包/類
@GET
@Path("/byannotation")
@RolesAllowed({"user"})
public User secureByAnnotation(@Context SecurityContext context) {
    return (User) context.getUserPrincipal();
}