Class AuthorizationFilter

java.lang.Object

com.codename1.backend.security.AuthorizationFilter

All Implemented Interfaces:

SecurityFilter

public final class AuthorizationFilter
extends Object
implements SecurityFilter

Puts the request to the chain's authorization rules, and throws AccessDeniedException when they refuse it. Last in every chain: what it lets through reaches the application.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	REQUIRED_AUTHORITIES	The attribute of the request's SecurityExchange that holds, as a list of text, the authorities any one of which the rule that refused the request would have accepted.

Method Summary

Modifier and Type	Method	Description
HttpServer.Response	doFilter(HttpServer.Request request, FilterChain chain)	The answer to request; null when nothing under the chain routes it, which the server answers 404.

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

REQUIRED_AUTHORITIES

public static final String REQUIRED_AUTHORITIES

The attribute of the request's SecurityExchange that holds, as a list of text, the authorities any one of which the rule that refused the request would have accepted. Set when that rule was one about authorities, so that whatever answers the refusal can say what to ask for.

See Also:

• Constant Field Values

Method Details

doFilter

public HttpServer.Response doFilter(HttpServer.Request request,
 FilterChain chain)
                             throws Exception

Description copied from interface: SecurityFilter

The answer to request; null when nothing under the chain routes it, which the server answers 404.

Specified by:

doFilter in interface SecurityFilter

Throws:

Exception