org.dataone.solr.servlet

Class SessionAuthorizationUtil

java.lang.Object

org.dataone.solr.servlet.SessionAuthorizationUtil

public class SessionAuthorizationUtil
extends Object

Provide base session authorization behavior. For use by concrete implementations of the SessionAuthorizationFilterStrategy

Author:

sroseboo

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.commons.logging.Log	logger

Method Summary

Modifier and Type	Method and Description
static void	addAuthenticatedSubjectsToRequest(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest, org.dataone.service.types.v1.Session session, org.dataone.service.types.v1.Subject authorizedSubject)
static void	handleNoCertificateManagerSession(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest, javax.servlet.ServletResponse response, javax.servlet.FilterChain fc)
static boolean	validateSSLAttributes(org.dataone.cn.servlet.http.ProxyServletRequestWrapper request) Create the java ssl attributes needed for dataone authorization by reading headers.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static org.apache.commons.logging.Log logger

Method Detail

handleNoCertificateManagerSession

public static void handleNoCertificateManagerSession(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest,
                                                     javax.servlet.ServletResponse response,
                                                     javax.servlet.FilterChain fc)
                                              throws javax.servlet.ServletException,
                                                     IOException,
                                                     org.dataone.service.exceptions.NotAuthorized

Throws:

javax.servlet.ServletException

IOException

org.dataone.service.exceptions.NotAuthorized

addAuthenticatedSubjectsToRequest

public static void addAuthenticatedSubjectsToRequest(org.dataone.cn.servlet.http.ProxyServletRequestWrapper proxyRequest,
                                                     org.dataone.service.types.v1.Session session,
                                                     org.dataone.service.types.v1.Subject authorizedSubject)
                                              throws org.dataone.service.exceptions.ServiceFailure,
                                                     org.dataone.service.exceptions.NotAuthorized,
                                                     org.dataone.service.exceptions.NotImplemented

Throws:

org.dataone.service.exceptions.ServiceFailure

org.dataone.service.exceptions.NotAuthorized

org.dataone.service.exceptions.NotImplemented

validateSSLAttributes

public static boolean validateSSLAttributes(org.dataone.cn.servlet.http.ProxyServletRequestWrapper request)

Create the java ssl attributes needed for dataone authorization by reading headers. The headers are populated by apache before rewrite and proxy

Parameters:

request -

Returns:

boolean