Package io.quarkus.security.deployment

Class SecurityProcessor

java.lang.Object

io.quarkus.security.deployment.SecurityProcessor

public class SecurityProcessor
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static class	SecurityProcessor.AdditionalSecured
(package private) class	SecurityProcessor.SecurityCheckStorageAppPredicate

Field Summary

Fields

Modifier and Type	Field	Description
(package private) SecurityConfig	security

Constructor Summary

Constructors

Constructor	Description
SecurityProcessor()

Method Summary

Modifier and Type	Method	Description
(package private) void	addBouncyCastleExportsToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.JPMSExportBuildItem> jpmsExports, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	addBouncyCastleProvidersToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.GeneratedNativeImageClassBuildItem> nativeImageClass, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) AdditionalBeanBuildItem	authorizationController(io.quarkus.deployment.builditem.LaunchModeBuildItem launchMode)
(package private) io.quarkus.deployment.builditem.NativeImageFeatureBuildItem	bouncyCastleFeature(List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
static int[]	configExpressionPositions(String[] allowedRoles)
(package private) static MethodDescription	createMethodDescription(org.jboss.jandex.MethodInfo additionalSecuredMethod)
(package private) io.quarkus.deployment.builditem.FeatureBuildItem	feature()
(package private) void	gatherSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeans, io.quarkus.deployment.annotations.BuildProducer<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpSecurityCheckProducer, List<RolesAllowedConfigExpResolverBuildItem> rolesAllowedConfigExpResolverBuildItems, BeanArchiveIndexBuildItem beanArchiveBuildItem, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.RunTimeConfigBuilderBuildItem> configBuilderProducer, List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods, SecurityCheckRecorder recorder, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflectiveClassBuildItemBuildProducer, List<AdditionalSecurityCheckBuildItem> additionalSecurityChecks, SecurityBuildTimeConfig config)
(package private) static boolean	isPublicNonStaticNonConstructor(org.jboss.jandex.MethodInfo methodInfo)
(package private) void	prepareBouncyCastleProviders(io.quarkus.deployment.pkg.builditem.CurateOutcomeBuildItem curateOutcomeBuildItem, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflection, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.RuntimeReinitializedClassBuildItem> runtimeReInitialized, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	produceJcaSecurityProviders(io.quarkus.deployment.annotations.BuildProducer<JCAProviderBuildItem> jcaProviders, io.quarkus.deployment.annotations.BuildProducer<BouncyCastleProviderBuildItem> bouncyCastleProvider, io.quarkus.deployment.annotations.BuildProducer<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProvider)	Create JCAProviderBuildItems for any configured provider names
(package private) void	recordBouncyCastleProviders(SecurityProviderRecorder recorder, List<BouncyCastleProviderBuildItem> bouncyCastleProviders, List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
(package private) void	registerAdditionalBeans(io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)
(package private) void	registerJCAProvidersForReflection(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> classes, List<JCAProviderBuildItem> jcaProviders, io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders)	Register the classes for reflection in the requested named providers
(package private) void	registerSecurityInterceptors(io.quarkus.deployment.annotations.BuildProducer<InterceptorBindingRegistrarBuildItem> registrars, io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)
void	resolveConfigExpressionRoles(Optional<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpRolesChecks, SecurityCheckRecorder recorder)
(package private) void	transformAdditionalSecuredClassesToMethods(List<AdditionalSecuredClassesBuildItem> additionalSecuredClassesBuildItems, io.quarkus.deployment.annotations.BuildProducer<AdditionalSecuredMethodsBuildItem> additionalSecuredMethodsBuildItemBuildProducer)	Transform deprecated AdditionalSecuredClassesBuildItem to AdditionalSecuredMethodsBuildItem.
(package private) void	transformSecurityAnnotations(io.quarkus.deployment.annotations.BuildProducer<AnnotationsTransformerBuildItem> transformers, List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods, SecurityBuildTimeConfig config)
(package private) void	validateStartUpObserversNotSecured(SynthesisFinishedBuildItem synthesisFinished, ValidationPhaseBuildItem validationPhase, BeanArchiveIndexBuildItem beanArchiveIndexBuildItem, io.quarkus.deployment.annotations.BuildProducer<ValidationPhaseBuildItem.ValidationErrorBuildItem> validationErrorProducer)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

security

SecurityConfig security

Constructor Detail

SecurityProcessor

public SecurityProcessor()

Method Detail

produceJcaSecurityProviders

void produceJcaSecurityProviders(io.quarkus.deployment.annotations.BuildProducer<JCAProviderBuildItem> jcaProviders,
                                 io.quarkus.deployment.annotations.BuildProducer<BouncyCastleProviderBuildItem> bouncyCastleProvider,
                                 io.quarkus.deployment.annotations.BuildProducer<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProvider)

Create JCAProviderBuildItems for any configured provider names

registerJCAProvidersForReflection

void registerJCAProvidersForReflection(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> classes,
                                       List<JCAProviderBuildItem> jcaProviders,
                                       io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders)
                                throws IOException,
                                       URISyntaxException

Register the classes for reflection in the requested named providers

Parameters:

classes - - ReflectiveClassBuildItem producer

jcaProviders - - JCAProviderBuildItem for requested providers

Throws:

URISyntaxException

MalformedURLException

IOException

prepareBouncyCastleProviders

void prepareBouncyCastleProviders(io.quarkus.deployment.pkg.builditem.CurateOutcomeBuildItem curateOutcomeBuildItem,
                                  io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflection,
                                  io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.RuntimeReinitializedClassBuildItem> runtimeReInitialized,
                                  List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
                                  List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)
                           throws Exception

Throws:

Exception

recordBouncyCastleProviders

void recordBouncyCastleProviders(SecurityProviderRecorder recorder,
                                 List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
                                 List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

bouncyCastleFeature

io.quarkus.deployment.builditem.NativeImageFeatureBuildItem bouncyCastleFeature(List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
                                                                                List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

addBouncyCastleProvidersToNativeImage

void addBouncyCastleProvidersToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.GeneratedNativeImageClassBuildItem> nativeImageClass,
                                           io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.NativeImageSecurityProviderBuildItem> additionalProviders,
                                           List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
                                           List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

addBouncyCastleExportsToNativeImage

void addBouncyCastleExportsToNativeImage(io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.JPMSExportBuildItem> jpmsExports,
                                         List<BouncyCastleProviderBuildItem> bouncyCastleProviders,
                                         List<BouncyCastleJsseProviderBuildItem> bouncyCastleJsseProviders)

registerSecurityInterceptors

void registerSecurityInterceptors(io.quarkus.deployment.annotations.BuildProducer<InterceptorBindingRegistrarBuildItem> registrars,
                                  io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)

transformAdditionalSecuredClassesToMethods

void transformAdditionalSecuredClassesToMethods(List<AdditionalSecuredClassesBuildItem> additionalSecuredClassesBuildItems,
                                                io.quarkus.deployment.annotations.BuildProducer<AdditionalSecuredMethodsBuildItem> additionalSecuredMethodsBuildItemBuildProducer)

Transform deprecated AdditionalSecuredClassesBuildItem to AdditionalSecuredMethodsBuildItem.

transformSecurityAnnotations

void transformSecurityAnnotations(io.quarkus.deployment.annotations.BuildProducer<AnnotationsTransformerBuildItem> transformers,
                                  List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods,
                                  SecurityBuildTimeConfig config)

gatherSecurityChecks

void gatherSecurityChecks(io.quarkus.deployment.annotations.BuildProducer<SyntheticBeanBuildItem> syntheticBeans,
                          io.quarkus.deployment.annotations.BuildProducer<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpSecurityCheckProducer,
                          List<RolesAllowedConfigExpResolverBuildItem> rolesAllowedConfigExpResolverBuildItems,
                          BeanArchiveIndexBuildItem beanArchiveBuildItem,
                          io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.ApplicationClassPredicateBuildItem> classPredicate,
                          io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.RunTimeConfigBuilderBuildItem> configBuilderProducer,
                          List<AdditionalSecuredMethodsBuildItem> additionalSecuredMethods,
                          SecurityCheckRecorder recorder,
                          io.quarkus.deployment.annotations.BuildProducer<io.quarkus.deployment.builditem.nativeimage.ReflectiveClassBuildItem> reflectiveClassBuildItemBuildProducer,
                          List<AdditionalSecurityCheckBuildItem> additionalSecurityChecks,
                          SecurityBuildTimeConfig config)

resolveConfigExpressionRoles

public void resolveConfigExpressionRoles(Optional<ConfigExpRolesAllowedSecurityCheckBuildItem> configExpRolesChecks,
                                         SecurityCheckRecorder recorder)

configExpressionPositions

public static int[] configExpressionPositions(String[] allowedRoles)

isPublicNonStaticNonConstructor

static boolean isPublicNonStaticNonConstructor(org.jboss.jandex.MethodInfo methodInfo)

feature

io.quarkus.deployment.builditem.FeatureBuildItem feature()

registerAdditionalBeans

void registerAdditionalBeans(io.quarkus.deployment.annotations.BuildProducer<AdditionalBeanBuildItem> beans)

authorizationController

AdditionalBeanBuildItem authorizationController(io.quarkus.deployment.builditem.LaunchModeBuildItem launchMode)

validateStartUpObserversNotSecured

void validateStartUpObserversNotSecured(SynthesisFinishedBuildItem synthesisFinished,
                                        ValidationPhaseBuildItem validationPhase,
                                        BeanArchiveIndexBuildItem beanArchiveIndexBuildItem,
                                        io.quarkus.deployment.annotations.BuildProducer<ValidationPhaseBuildItem.ValidationErrorBuildItem> validationErrorProducer)

createMethodDescription

static MethodDescription createMethodDescription(org.jboss.jandex.MethodInfo additionalSecuredMethod)