org.openqa.jetty.http

Class SecurityConstraint

java.lang.Object

org.openqa.jetty.http.SecurityConstraint

All Implemented Interfaces:

Serializable, Cloneable

public class SecurityConstraint
extends Object
implements Cloneable, Serializable

Describe an auth and/or data constraint.

Version:

$Revision: 1.44 $

Author:

Greg Wilkins (gregw)

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SecurityConstraint.Nobody Nobody user.

Field Summary

Fields

Modifier and Type	Field and Description
static String	__BASIC_AUTH
static String	__CERT_AUTH
static String	__CERT_AUTH2
static String	__DIGEST_AUTH
static String	__FORM_AUTH
static SecurityConstraint.Nobody	__NOBODY
static String	ANY_ROLE
static int	DC_CONFIDENTIAL
static int	DC_INTEGRAL
static int	DC_NONE
static int	DC_UNSET
static String	NONE

Constructor Summary

Constructors

Constructor and Description
SecurityConstraint() Constructor.
SecurityConstraint(String name, String role) Conveniance Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
void	addMethod(String method)
void	addRole(String role)
static boolean	check(List constraints, Authenticator authenticator, UserRealm realm, String pathInContext, HttpRequest request, HttpResponse response) Check security contraints
Object	clone()
boolean	forMethod(String method)
boolean	getAuthenticate()
int	getDataConstraint()
List	getMethods()
List	getRoles()
boolean	hasDataConstraint()
boolean	hasRole(String role)
boolean	isAnyRole()
boolean	isForbidden()
void	setAuthenticate(boolean authenticate)
void	setDataConstraint(int c)
void	setName(String name)
String	toString()

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

__BASIC_AUTH

public static final String __BASIC_AUTH

See Also:

Constant Field Values

__FORM_AUTH

public static final String __FORM_AUTH

See Also:

Constant Field Values

__DIGEST_AUTH

public static final String __DIGEST_AUTH

See Also:

Constant Field Values

__CERT_AUTH

public static final String __CERT_AUTH

See Also:

Constant Field Values

__CERT_AUTH2

public static final String __CERT_AUTH2

See Also:

Constant Field Values

DC_UNSET

public static final int DC_UNSET

See Also:

Constant Field Values

DC_NONE

public static final int DC_NONE

See Also:

Constant Field Values

DC_INTEGRAL

public static final int DC_INTEGRAL

See Also:

Constant Field Values

DC_CONFIDENTIAL

public static final int DC_CONFIDENTIAL

See Also:

Constant Field Values

NONE

public static final String NONE

See Also:

Constant Field Values

ANY_ROLE

public static final String ANY_ROLE

See Also:

Constant Field Values

__NOBODY

public static final SecurityConstraint.Nobody __NOBODY

Constructor Detail

SecurityConstraint

public SecurityConstraint()

Constructor.

SecurityConstraint

public SecurityConstraint(String name,
                  String role)

Conveniance Constructor.

Parameters:

name -

role -

Method Detail

setName

public void setName(String name)

Parameters:

name -

addMethod

public void addMethod(String method)

Parameters:

method -

getMethods

public List getMethods()

forMethod

public boolean forMethod(String method)

Parameters:

method - Method name.

Returns:

True if this constraint applies to the method. If no method has been set, then the constraint applies to all methods.

addRole

public void addRole(String role)

Parameters:

role - The rolename. If the rolename is '*' all other roles are removed and anyRole is set true and subsequent addRole calls are ignored. Authenticate is forced true by this call.

isAnyRole

public boolean isAnyRole()

Returns:

True if any user role is permitted.

getRoles

public List getRoles()

Returns:

List of roles for this constraint.

hasRole

public boolean hasRole(String role)

Parameters:

role -

Returns:

True if the constraint contains the role.

setAuthenticate

public void setAuthenticate(boolean authenticate)

Parameters:

authenticate - True if users must be authenticated

getAuthenticate

public boolean getAuthenticate()

Returns:

True if the constraint requires request authentication

isForbidden

public boolean isForbidden()

Returns:

True if authentication required but no roles set

setDataConstraint

public void setDataConstraint(int c)

Parameters:

c -

getDataConstraint

public int getDataConstraint()

Returns:

Data constrain indicator: 0=DC+NONE, 1=DC_INTEGRAL & 2=DC_CONFIDENTIAL

hasDataConstraint

public boolean hasDataConstraint()

Returns:

True if a data constraint has been set.

clone

public Object clone()
             throws CloneNotSupportedException

Overrides:

clone in class Object

Throws:

CloneNotSupportedException

toString

public String toString()

Overrides:

toString in class Object

check

public static boolean check(List constraints,
            Authenticator authenticator,
            UserRealm realm,
            String pathInContext,
            HttpRequest request,
            HttpResponse response)
                     throws HttpException,
                            IOException

Check security contraints

Parameters:

constraints -

authenticator -

realm -

pathInContext -

request -

response -

Returns:

false if the request has failed a security constraint or the authenticator has already sent a response.

Throws:

HttpException

IOException