2 * Copyright (c) 2018 Red Hat, Inc. and others. All rights reserved.
4 * This program and the accompanying materials are made available under the
5 * terms of the Eclipse Public License v1.0 which accompanies this distribution,
6 * and is available at http://www.eclipse.org/legal/epl-v10.html
8 package org.opendaylight.aaa.shiro.web.env;
10 import static java.util.Objects.requireNonNull;
12 import org.apache.shiro.web.env.EnvironmentLoaderListener;
13 import org.opendaylight.aaa.shiro.filters.AAAShiroFilter;
14 import org.opendaylight.aaa.web.FilterDetails;
15 import org.opendaylight.aaa.web.WebContext;
16 import org.opendaylight.aaa.web.WebContextBuilder;
17 import org.opendaylight.aaa.web.WebContextSecurer;
20 * Secures a {@link WebContext} using Shiro.
22 * @author Michael Vorburger.ch
24 public class ShiroWebContextSecurer implements WebContextSecurer {
25 private final EnvironmentLoaderListener environmentLoaderListener;
27 public ShiroWebContextSecurer(final EnvironmentLoaderListener environmentLoaderListener) {
28 this.environmentLoaderListener = requireNonNull(environmentLoaderListener);
32 public void requireAuthentication(final WebContextBuilder webContextBuilder, final boolean asyncSupported,
33 final String... urlPatterns) {
35 .addListener(environmentLoaderListener)
36 // AAA filter in front of these REST web services as well as for moon endpoints
37 .addFilter(FilterDetails.builder()
38 .filter(new AAAShiroFilter())
39 .addUrlPatterns(urlPatterns)
40 .asyncSupported(asyncSupported)