thredds.servlet.restrict

Class TomcatAuthorizer

java.lang.Object

thredds.servlet.restrict.TomcatAuthorizer

All Implemented Interfaces:

Authorizer

Direct Known Subclasses:

CAMSAuthorizer

public class TomcatAuthorizer
extends java.lang.Object
implements Authorizer

Use Tomcat security.

Constructor Summary

Constructors

Constructor and Description
TomcatAuthorizer()

Method Summary

Modifier and Type	Method and Description
boolean	authorize(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res, java.lang.String role) Decide is this request is authorized in the named role.
void	doGet(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res) Process this request.
void	setRoleSource(RoleSource db) Set the role source, if there is one.
void	setSslPort(java.lang.String sslPort)
void	setUseSSL(boolean useSSL)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TomcatAuthorizer

public TomcatAuthorizer()

Method Detail

setUseSSL

public void setUseSSL(boolean useSSL)

setSslPort

public void setSslPort(java.lang.String sslPort)

setRoleSource

public void setRoleSource(RoleSource db)

Description copied from interface: Authorizer

Set the role source, if there is one. If not, assume no role authentication is needed. use RoleSource.hasRole() to test for role.

Specified by:

setRoleSource in interface Authorizer

Parameters:

db - tells whether a user has the named role.

authorize

public boolean authorize(javax.servlet.http.HttpServletRequest req,
                         javax.servlet.http.HttpServletResponse res,
                         java.lang.String role)
                  throws java.io.IOException

Description copied from interface: Authorizer

Decide is this request is authorized in the named role. This method must be thread-safe.

Specified by:

authorize in interface Authorizer

Parameters:

req - the request

res - the response

role - need this role

Returns:

true if user is authenticated. if false, must set res.setStatus().

Throws:

java.io.IOException - I/O error, eg network

doGet

public void doGet(javax.servlet.http.HttpServletRequest req,
                  javax.servlet.http.HttpServletResponse res)
           throws javax.servlet.ServletException,
                  java.io.IOException

Description copied from interface: Authorizer

Process this request. May be a no-op.

Specified by:

doGet in interface Authorizer

Parameters:

req - the request

res - the response

Throws:

javax.servlet.ServletException - other errors

java.io.IOException - I/O error, eg network