thredds.servlet.restrict

Class TomcatAuthorizer

java.lang.Object

thredds.servlet.restrict.TomcatAuthorizer

All Implemented Interfaces:

Authorizer

Direct Known Subclasses:

CAMSAuthorizer

public class TomcatAuthorizer
extends java.lang.Object
implements Authorizer

Use Tomcat security.

Constructor Summary

Constructors

Constructor and Description
TomcatAuthorizer()

Method Summary

Modifier and Type	Method and Description
boolean	authorize(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res, java.lang.String role) Decide is this request is authorized in the named role.
void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res) Process this request.
void	init(javax.servlet.http.HttpServlet servlet) Initialize with servlet parameters.
void	setRoleSource(RoleSource db) Set the role source, if there is one.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TomcatAuthorizer

public TomcatAuthorizer()

Method Detail

authorize

public boolean authorize(javax.servlet.http.HttpServletRequest req,
                         javax.servlet.http.HttpServletResponse res,
                         java.lang.String role)
                  throws java.io.IOException

Description copied from interface: Authorizer

Decide is this request is authorized in the named role. This method must be thread-safe.

Specified by:

authorize in interface Authorizer

Parameters:

req - the request

res - the response

role - need this role

Returns:

true if user is authenticated. if false, must set res.setStatus().

Throws:

java.io.IOException - I/O error, eg network

init

public void init(javax.servlet.http.HttpServlet servlet)
          throws javax.servlet.ServletException

Description copied from interface: Authorizer

Initialize with servlet parameters.

Specified by:

init in interface Authorizer

Parameters:

servlet - get init parameters from here.

Throws:

javax.servlet.ServletException - if error

setRoleSource

public void setRoleSource(RoleSource db)

Description copied from interface: Authorizer

Set the role source, if there is one. If not, assume no role authentication is needed. use RoleSource.hasRole() to test for role.

Specified by:

setRoleSource in interface Authorizer

Parameters:

db - tells whether a user has the named role.

doGet

public void doGet(javax.servlet.http.HttpServletRequest req,
                  javax.servlet.http.HttpServletResponse res)
           throws javax.servlet.ServletException,
                  java.io.IOException

Description copied from interface: Authorizer

Process this request. May be a no-op.

Specified by:

doGet in interface Authorizer

Parameters:

req - the request

res - the response

Throws:

javax.servlet.ServletException - other errors

java.io.IOException - I/O error, eg network