Package io.jmix.rest.security.impl
Class RestAsResourceServerBeforeInvocationEventListener
java.lang.Object
io.jmix.rest.security.impl.RestAsResourceServerBeforeInvocationEventListener
A listener for
AsResourceServerBeforeInvocationEvent
that checks "rest.enabled" specific permission for
each REST API request, managed by resource server of Authorization Server add-on. If the current user doesn't have
this policy then the FORBIDDEN error is thrown.-
Field Summary
Modifier and TypeFieldDescriptionprotected AccessManager
protected Messages
protected CustomRestAuthorizedUrlsProvider
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionvoid
protected boolean
shouldCheckRequest
(jakarta.servlet.ServletRequest request)
-
Field Details
-
accessManager
-
restAuthorizedUrlsProvider
-
messages
-
-
Constructor Details
-
RestAsResourceServerBeforeInvocationEventListener
public RestAsResourceServerBeforeInvocationEventListener()
-
-
Method Details
-
doListen
@EventListener(AsResourceServerBeforeInvocationEvent.class) public void doListen(AsResourceServerBeforeInvocationEvent event) -
shouldCheckRequest
protected boolean shouldCheckRequest(jakarta.servlet.ServletRequest request)
-