Package io.jmix.rest.security.impl

Class RestAsResourceServerBeforeInvocationEventListener

java.lang.Object

io.jmix.rest.security.impl.RestAsResourceServerBeforeInvocationEventListener

public class RestAsResourceServerBeforeInvocationEventListener
extends Object

A listener for AsResourceServerBeforeInvocationEvent that checks "rest.enabled" specific permission for each REST API request, managed by resource server of Authorization Server add-on. If the current user doesn't have this policy then the FORBIDDEN error is thrown.

Field Summary

Fields

Modifier and Type	Field	Description
protected AccessManager	accessManager
protected Messages	messages
protected CustomRestAuthorizedUrlsProvider	restAuthorizedUrlsProvider

Constructor Summary

Constructors

Constructor	Description
RestAsResourceServerBeforeInvocationEventListener()

Method Summary

Modifier and Type	Method	Description
void	doListen(AsResourceServerBeforeInvocationEvent event)
protected boolean	shouldCheckRequest(jakarta.servlet.ServletRequest request)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

accessManager

@Autowired
protected AccessManager accessManager

restAuthorizedUrlsProvider

@Autowired
protected CustomRestAuthorizedUrlsProvider restAuthorizedUrlsProvider

messages

@Autowired
protected Messages messages

Constructor Details

RestAsResourceServerBeforeInvocationEventListener

public RestAsResourceServerBeforeInvocationEventListener()

Method Details

doListen

@EventListener(AsResourceServerBeforeInvocationEvent.class)
public void doListen(AsResourceServerBeforeInvocationEvent event)

shouldCheckRequest

protected boolean shouldCheckRequest(jakarta.servlet.ServletRequest request)