io.micronaut.security.rules

Class SensitiveEndpointRule

java.lang.Object

io.micronaut.security.rules.SensitiveEndpointRule

All Implemented Interfaces:

Ordered, SecurityRule

@Singleton
public class SensitiveEndpointRule
extends Object
implements SecurityRule

Finds any sensitive endpoints and processes requests that match their id. The user must be authenticated to execute sensitive requests.

Since:

1.0

Author:

Sergio del Amo, James Kleeh

Field Summary

Fields

Modifier and Type	Field and Description
protected Map<ExecutableMethod,Boolean>	endpointMethods A map where the key represents the method of an endpoint and the value represents the endpoints sensitivity.
static Integer	ORDER The order of the rule.

Fields inherited from interface io.micronaut.security.rules.SecurityRule

DENY_ALL, IS_ANONYMOUS, IS_AUTHENTICATED

Fields inherited from interface io.micronaut.core.order.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Method Summary

Modifier and Type	Method and Description
SecurityRuleResult	check(HttpRequest request, RouteMatch routeMatch, Map<String,Object> claims) Returns a security result based on any conditions.
int	getOrder()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ORDER

public static final Integer ORDER

The order of the rule.

endpointMethods

protected final Map<ExecutableMethod,Boolean> endpointMethods

A map where the key represents the method of an endpoint and the value represents the endpoints sensitivity.

Method Detail

check

public SecurityRuleResult check(HttpRequest request,
                                @Nullable
                                RouteMatch routeMatch,
                                @Nullable
                                Map<String,Object> claims)

Description copied from interface: SecurityRule

Returns a security result based on any conditions.

Specified by:

check in interface SecurityRule

Parameters:

request - The current request

routeMatch - The matched route or empty if no route was matched. e.g. static resource.

claims - The claims from the token. Null if not authenticated

Returns:

The result

See Also:

SecurityRuleResult

getOrder

public int getOrder()

Specified by:

getOrder in interface Ordered

Returns:

The order of the object. Defaults to zero (no order).