| /* |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| */ |
| package org.apache.shiro.spring.security.interceptor; |
| |
| import org.aopalliance.intercept.MethodInterceptor; |
| import org.aopalliance.intercept.MethodInvocation; |
| import org.apache.shiro.aop.AnnotationResolver; |
| import org.apache.shiro.authz.aop.*; |
| import org.apache.shiro.spring.aop.SpringAnnotationResolver; |
| |
| import java.lang.reflect.Method; |
| import java.util.ArrayList; |
| import java.util.List; |
| |
| /** |
| * Allows Shiro Annotations to work in any <a href="http://aopalliance.sourceforge.net/">AOP Alliance</a> |
| * specific implementation environment (for example, Spring). |
| * |
| * @since 0.2 |
| */ |
| public class AopAllianceAnnotationsAuthorizingMethodInterceptor |
| extends AnnotationsAuthorizingMethodInterceptor implements MethodInterceptor { |
| |
| public AopAllianceAnnotationsAuthorizingMethodInterceptor() { |
| List<AuthorizingAnnotationMethodInterceptor> interceptors = |
| new ArrayList<AuthorizingAnnotationMethodInterceptor>(5); |
| |
| //use a Spring-specific Annotation resolver - Spring's AnnotationUtils is nicer than the |
| //raw JDK resolution process. |
| AnnotationResolver resolver = new SpringAnnotationResolver(); |
| //we can re-use the same resolver instance - it does not retain state: |
| interceptors.add(new RoleAnnotationMethodInterceptor(resolver)); |
| interceptors.add(new PermissionAnnotationMethodInterceptor(resolver)); |
| interceptors.add(new AuthenticatedAnnotationMethodInterceptor(resolver)); |
| interceptors.add(new UserAnnotationMethodInterceptor(resolver)); |
| interceptors.add(new GuestAnnotationMethodInterceptor(resolver)); |
| |
| setMethodInterceptors(interceptors); |
| } |
| /** |
| * Creates a {@link MethodInvocation MethodInvocation} that wraps an |
| * {@link org.aopalliance.intercept.MethodInvocation org.aopalliance.intercept.MethodInvocation} instance, |
| * enabling Shiro Annotations in <a href="http://aopalliance.sourceforge.net/">AOP Alliance</a> environments |
| * (Spring, etc.). |
| * |
| * @param implSpecificMethodInvocation AOP Alliance {@link org.aopalliance.intercept.MethodInvocation MethodInvocation} |
| * @return a Shiro {@link MethodInvocation MethodInvocation} instance that wraps the AOP Alliance instance. |
| */ |
| protected org.apache.shiro.aop.MethodInvocation createMethodInvocation(Object implSpecificMethodInvocation) { |
| final MethodInvocation mi = (MethodInvocation) implSpecificMethodInvocation; |
| |
| return new org.apache.shiro.aop.MethodInvocation() { |
| public Method getMethod() { |
| return mi.getMethod(); |
| } |
| |
| public Object[] getArguments() { |
| return mi.getArguments(); |
| } |
| |
| public String toString() { |
| return "Method invocation [" + mi.getMethod() + "]"; |
| } |
| |
| public Object proceed() throws Throwable { |
| return mi.proceed(); |
| } |
| |
| public Object getThis() { |
| return mi.getThis(); |
| } |
| }; |
| } |
| |
| /** |
| * Simply casts the method argument to an |
| * {@link org.aopalliance.intercept.MethodInvocation org.aopalliance.intercept.MethodInvocation} and then |
| * calls <code>methodInvocation.{@link org.aopalliance.intercept.MethodInvocation#proceed proceed}()</code> |
| * |
| * @param aopAllianceMethodInvocation the {@link org.aopalliance.intercept.MethodInvocation org.aopalliance.intercept.MethodInvocation} |
| * @return the {@link org.aopalliance.intercept.MethodInvocation#proceed() org.aopalliance.intercept.MethodInvocation.proceed()} method call result. |
| * @throws Throwable if the underlying AOP Alliance <code>proceed()</code> call throws a <code>Throwable</code>. |
| */ |
| protected Object continueInvocation(Object aopAllianceMethodInvocation) throws Throwable { |
| MethodInvocation mi = (MethodInvocation) aopAllianceMethodInvocation; |
| return mi.proceed(); |
| } |
| |
| /** |
| * Creates a Shiro {@link MethodInvocation MethodInvocation} instance and then immediately calls |
| * {@link org.apache.shiro.authz.aop.AuthorizingMethodInterceptor#invoke super.invoke}. |
| * |
| * @param methodInvocation the AOP Alliance-specific <code>methodInvocation</code> instance. |
| * @return the return value from invoking the method invocation. |
| * @throws Throwable if the underlying AOP Alliance method invocation throws a <code>Throwable</code>. |
| */ |
| public Object invoke(MethodInvocation methodInvocation) throws Throwable { |
| org.apache.shiro.aop.MethodInvocation mi = createMethodInvocation(methodInvocation); |
| return super.invoke(mi); |
| } |
| } |