Apache CXF API

org.apache.cxf.rt.security.xacml
Class AbstractXACMLAuthorizingInterceptor

java.lang.Object
  extended by org.apache.cxf.phase.AbstractPhaseInterceptor<Message>
      extended by org.apache.cxf.rt.security.xacml.AbstractXACMLAuthorizingInterceptor
All Implemented Interfaces:
Interceptor<Message>, PhaseInterceptor<Message>
Direct Known Subclasses:
XACMLAuthorizingInterceptor

Deprecated.

@Deprecated
public abstract class AbstractXACMLAuthorizingInterceptor
extends AbstractPhaseInterceptor<Message>

An abstract interceptor to perform an XACML authorization request to a remote PDP, and make an authorization decision based on the response. It takes the principal and roles from the SecurityContext, and uses the XACMLRequestBuilder to construct an XACML Request statement. This class must be subclassed to actually perform the request to the PDP.


Constructor Summary
AbstractXACMLAuthorizingInterceptor()
          Deprecated.  
 
Method Summary
protected  boolean authorize(Principal principal, List<String> roles, Message message)
          Deprecated. Perform a (remote) authorization decision and return a boolean depending on the result
 XACMLRequestBuilder getRequestBuilder()
          Deprecated.  
 void handleMessage(Message message)
          Deprecated. Intercepts a message.
protected  void handleObligations(org.opensaml.xacml.ctx.RequestType request, Principal principal, Message message, org.opensaml.xacml.ctx.ResultType result)
          Deprecated. Handle any Obligations returned by the PDP
abstract  org.opensaml.xacml.ctx.ResponseType performRequest(org.opensaml.xacml.ctx.RequestType request, Message message)
          Deprecated.  
 void setRequestBuilder(XACMLRequestBuilder requestBuilder)
          Deprecated.  
 
Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor
addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

AbstractXACMLAuthorizingInterceptor

public AbstractXACMLAuthorizingInterceptor()
Deprecated. 
Method Detail

handleMessage

public void handleMessage(Message message)
                   throws Fault
Deprecated. 
Description copied from interface: Interceptor
Intercepts a message. Interceptors should NOT invoke handleMessage or handleFault on the next interceptor - the interceptor chain will take care of this.

Throws:
Fault

getRequestBuilder

public XACMLRequestBuilder getRequestBuilder()
Deprecated. 

setRequestBuilder

public void setRequestBuilder(XACMLRequestBuilder requestBuilder)
Deprecated. 

authorize

protected boolean authorize(Principal principal,
                            List<String> roles,
                            Message message)
                     throws Exception
Deprecated. 
Perform a (remote) authorization decision and return a boolean depending on the result

Throws:
Exception

performRequest

public abstract org.opensaml.xacml.ctx.ResponseType performRequest(org.opensaml.xacml.ctx.RequestType request,
                                                                   Message message)
                                                            throws Exception
Deprecated. 
Throws:
Exception

handleObligations

protected void handleObligations(org.opensaml.xacml.ctx.RequestType request,
                                 Principal principal,
                                 Message message,
                                 org.opensaml.xacml.ctx.ResultType result)
                          throws Exception
Deprecated. 
Handle any Obligations returned by the PDP

Throws:
Exception

Apache CXF API

Apache CXF