Package io.quarkus.security.deployment

Class SecurityProcessor

java.lang.Object

io.quarkus.security.deployment.SecurityProcessor

public class SecurityProcessor
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static class	SecurityProcessor.AdditionalSecured
(package private) static final class	SecurityProcessor.MethodSecurityChecks
(package private) static class	SecurityProcessor.SecurityCheckStorageAppPredicate

Field Summary

Fields

Modifier and Type	Field	Description
(package private) SecurityConfig	security

Constructor Summary

Constructors

Constructor	Description
SecurityProcessor()

Method Summary

Modifier and Type	Method	Description
(package private) void	addBouncyCastleExportsToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.JPMSExportBuildItem> jpmsExports, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	addBouncyCastleProvidersToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.GeneratedNativeImageClassBuildItem> nativeImageClass, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) AdditionalBeanBuildItem	authorizationController(io.quarkus.deployment.builditem.LaunchModeBuildItem launchMode)
(package private) io.quarkus.deployment.builditem.NativeImageFeatureBuildItem	bouncyCastleFeature(List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
static int[]	configExpressionPositions(String[] allowedRoles)
(package private) static MethodDescription	createMethodDescription(org.jboss.jandex.MethodInfo additionalSecuredMethod)
(package private) void	createSecurityCheckStorage(io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeans, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate, SecurityCheckRecorder recorder, SecurityProcessor.MethodSecurityChecks securityChecksItem, List<DefaultSecurityCheckBuildItem> defaultSecurityCheckBuildItem)
(package private) io.quarkus.deployment.builditem.FeatureBuildItem	feature()
(package private) void	gatherClassSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<RegisterClassSecurityCheckBuildItem> producer, BeanArchiveIndexBuildItem indexBuildItem, List<ClassSecurityCheckAnnotationBuildItem> classAnnotationItems)
(package private) SecurityProcessor.MethodSecurityChecks	gatherSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpSecurityCheckProducer, List<RolesAllowedConfigExpResolverBuildItem> rolesAllowedConfigExpResolverBuildItems, BeanArchiveIndexBuildItem beanArchiveBuildItem, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.RunTimeConfigBuilderBuildItem> configBuilderProducer, List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods, SecurityCheckRecorder recorder, io.quarkus.deployment.annotations.BuildProducer<ClassSecurityCheckStorageBuildItem> classSecurityCheckStorageProducer, List<RegisterClassSecurityCheckBuildItem> registerClassSecurityCheckBuildItems, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflectiveClassBuildItemBuildProducer, List<AdditionalSecurityCheckBuildItem> additionalSecurityChecks, SecurityBuildTimeConfig config)
(package private) static boolean	isPublicNonStaticNonConstructor(org.jboss.jandex.MethodInfo methodInfo)
(package private) void	prepareBouncyCastleProviders(io.quarkus.deployment.pkg.builditem.CurateOutcomeBuildItem curateOutcomeBuildItem, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflection, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.RuntimeReinitializedClassBuildItem> runtimeReInitialized, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	produceJcaSecurityProviders(io.quarkus.deployment.annotations.BuildProducer<JCAProviderBuildItem> jcaProviders, io.quarkus.deployment.annotations.BuildProducer<BouncyCastleProviderBuildItem> bouncyCastleProvider, io.quarkus.deployment.annotations.BuildProducer<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProvider)	Create JCAProviderBuildItems for any configured provider names
(package private) void	recordBouncyCastleProviders(SecurityProviderRecorder recorder, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	recordRuntimeConfigReady(SecurityCheckRecorder recorder, io.quarkus.deployment.builditem.ShutdownContextBuildItem shutdownContextBuildItem, io.quarkus.deployment.builditem.LaunchModeBuildItem launchModeBuildItem)
(package private) void	registerAdditionalBeans(io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)
(package private) void	registerJCAProvidersForReflection(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> classes, List<JCAProviderBuildItem> jcaProviders, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders)	Register the classes for reflection in the requested named providers
(package private) void	registerSecurityInterceptors(io.quarkus.deployment.annotations.BuildProducer<InterceptorBindingRegistrarBuildItem> registrars, io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans, io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeanProducer, SecurityCheckRecorder recorder, Optional<AdditionalSecurityConstrainerEventPropsBuildItem> additionalSecurityConstrainerEventsItem)
void	resolveConfigExpressionRoles(Optional<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpRolesChecks, SecurityCheckRecorder recorder)
(package private) void	transformAdditionalSecuredClassesToMethods(List<AdditionalSecuredClassesBuildItem> additionalSecuredClassesBuildItems, io.quarkus.deployment.annotations.BuildProducer<AdditionalSecuredMethodsBuildItem> additionalSecuredMethodsBuildItemBuildProducer)	Transform deprecated AdditionalSecuredClassesBuildItem to AdditionalSecuredMethodsBuildItem.
(package private) void	transformSecurityAnnotations(io.quarkus.deployment.annotations.BuildProducer<AnnotationsTransformerBuildItem> transformers, List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods, SecurityBuildTimeConfig config)
(package private) void	validateStartUpObserversNotSecured(SynthesisFinishedBuildItem synthesisFinished, ValidationPhaseBuildItem validationPhase, BeanArchiveIndexBuildItem beanArchiveIndexBuildItem, io.quarkus.deployment.annotations.BuildProducer<ValidationPhaseBuildItem.ValidationErrorBuildItem> validationErrorProducer)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

security

SecurityConfig security

Constructor Details

SecurityProcessor

public SecurityProcessor()

Method Details

produceJcaSecurityProviders

void produceJcaSecurityProviders(io.quarkus.deployment.annotations.BuildProducer<JCAProviderBuildItem> jcaProviders,
 io.quarkus.deployment.annotations.BuildProducer<BouncyCastleProviderBuildItem> bouncyCastleProvider,
 io.quarkus.deployment.annotations.BuildProducer<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProvider)

Create JCAProviderBuildItems for any configured provider names

registerJCAProvidersForReflection

void registerJCAProvidersForReflection(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> classes,
 List<JCAProviderBuildItem> jcaProviders,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders)
                                throws IOException,
URISyntaxException

Register the classes for reflection in the requested named providers

Parameters:

classes - - ReflectiveClassBuildItem producer

jcaProviders - - JCAProviderBuildItem for requested providers

Throws:

URISyntaxException

MalformedURLException

IOException

prepareBouncyCastleProviders

void prepareBouncyCastleProviders(io.quarkus.deployment.pkg.builditem.CurateOutcomeBuildItem curateOutcomeBuildItem,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflection,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.RuntimeReinitializedClassBuildItem> runtimeReInitialized,
 List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
                           throws Exception

Throws:

Exception

recordBouncyCastleProviders

void recordBouncyCastleProviders(SecurityProviderRecorder recorder,
 List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

bouncyCastleFeature

io.quarkus.deployment.builditem.NativeImageFeatureBuildItem bouncyCastleFeature(List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

addBouncyCastleProvidersToNativeImage

void addBouncyCastleProvidersToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.GeneratedNativeImageClassBuildItem> nativeImageClass,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders,
 List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

addBouncyCastleExportsToNativeImage

void addBouncyCastleExportsToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.JPMSExportBuildItem> jpmsExports,
 List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

recordRuntimeConfigReady

void recordRuntimeConfigReady(SecurityCheckRecorder recorder,
 io.quarkus.deployment.builditem.ShutdownContextBuildItem shutdownContextBuildItem,
 io.quarkus.deployment.builditem.LaunchModeBuildItem launchModeBuildItem)

registerSecurityInterceptors

void registerSecurityInterceptors(io.quarkus.deployment.annotations.BuildProducer<InterceptorBindingRegistrarBuildItem> registrars,
 io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans,
 io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeanProducer,
 SecurityCheckRecorder recorder,
 Optional<AdditionalSecurityConstrainerEventPropsBuildItem> additionalSecurityConstrainerEventsItem)

transformAdditionalSecuredClassesToMethods

void transformAdditionalSecuredClassesToMethods(List<AdditionalSecuredClassesBuildItem> additionalSecuredClassesBuildItems,
 io.quarkus.deployment.annotations.BuildProducer<AdditionalSecuredMethodsBuildItem> additionalSecuredMethodsBuildItemBuildProducer)

Transform deprecated AdditionalSecuredClassesBuildItem to AdditionalSecuredMethodsBuildItem.

transformSecurityAnnotations

void transformSecurityAnnotations(io.quarkus.deployment.annotations.BuildProducer<AnnotationsTransformerBuildItem> transformers,
 List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods,
 SecurityBuildTimeConfig config)

gatherSecurityChecks

SecurityProcessor.MethodSecurityChecks gatherSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpSecurityCheckProducer,
 List<RolesAllowedConfigExpResolverBuildItem> rolesAllowedConfigExpResolverBuildItems,
 BeanArchiveIndexBuildItem beanArchiveBuildItem,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.RunTimeConfigBuilderBuildItem> configBuilderProducer,
 List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods,
 SecurityCheckRecorder recorder,
 io.quarkus.deployment.annotations.BuildProducer<ClassSecurityCheckStorageBuildItem> classSecurityCheckStorageProducer,
 List<RegisterClassSecurityCheckBuildItem> registerClassSecurityCheckBuildItems,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflectiveClassBuildItemBuildProducer,
 List<AdditionalSecurityCheckBuildItem> additionalSecurityChecks,
 SecurityBuildTimeConfig config)

createSecurityCheckStorage

void createSecurityCheckStorage(io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeans,
 io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate,
 SecurityCheckRecorder recorder,
 SecurityProcessor.MethodSecurityChecks securityChecksItem,
 List<DefaultSecurityCheckBuildItem> defaultSecurityCheckBuildItem)

resolveConfigExpressionRoles

public void resolveConfigExpressionRoles(Optional<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpRolesChecks,
 SecurityCheckRecorder recorder)

configExpressionPositions

public static int[] configExpressionPositions(String[] allowedRoles)

isPublicNonStaticNonConstructor

static boolean isPublicNonStaticNonConstructor(org.jboss.jandex.MethodInfo methodInfo)

feature

io.quarkus.deployment.builditem.FeatureBuildItem feature()

registerAdditionalBeans

void registerAdditionalBeans(io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)

authorizationController

AdditionalBeanBuildItem authorizationController(io.quarkus.deployment.builditem.LaunchModeBuildItem launchMode)

validateStartUpObserversNotSecured

void validateStartUpObserversNotSecured(SynthesisFinishedBuildItem synthesisFinished,
 ValidationPhaseBuildItem validationPhase,
 BeanArchiveIndexBuildItem beanArchiveIndexBuildItem,
 io.quarkus.deployment.annotations.BuildProducer<ValidationPhaseBuildItem.ValidationErrorBuildItem> validationErrorProducer)

gatherClassSecurityChecks

void gatherClassSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<RegisterClassSecurityCheckBuildItem> producer,
 BeanArchiveIndexBuildItem indexBuildItem,
 List<ClassSecurityCheckAnnotationBuildItem> classAnnotationItems)

createMethodDescription

static MethodDescription createMethodDescription(org.jboss.jandex.MethodInfo additionalSecuredMethod)