io.ballerina.messaging.broker.auth.authorization.provider

Class DefaultMacHandler

java.lang.Object

io.ballerina.messaging.broker.auth.authorization.provider.DefaultMacHandler

All Implemented Interfaces:

MandatoryAccessController

public class DefaultMacHandler
extends Object
implements MandatoryAccessController

Default implementation class for MAC handler.

Constructor Summary

Constructors

Constructor and Description
DefaultMacHandler()

Method Summary

Modifier and Type	Method and Description
boolean	authorize(String scopeName, Set<String> userGroups) Authorize user with given scope key.
void	initialize(io.ballerina.messaging.broker.common.StartupContext startupContext, UserStore userStore, Map<String,String> properties) Initialize authorization controller based on given auth configuration, user store.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultMacHandler

public DefaultMacHandler()

Method Detail

initialize

public void initialize(io.ballerina.messaging.broker.common.StartupContext startupContext,
                       UserStore userStore,
                       Map<String,String> properties)
                throws Exception

Description copied from interface: MandatoryAccessController

Initialize authorization controller based on given auth configuration, user store.

Specified by:

initialize in interface MandatoryAccessController

Parameters:

startupContext - the startup context provides registered services in broker

userStore - contains the user ID to user group mapping

properties - properties

Throws:

Exception

authorize

public boolean authorize(String scopeName,
                         Set<String> userGroups)
                  throws AuthNotFoundException

Description copied from interface: MandatoryAccessController

Authorize user with given scope key.

Specified by:

authorize in interface MandatoryAccessController

Parameters:

scopeName - a scope key

userGroups - set of user groups to check

Returns:

if authorised or not

Throws:

AuthNotFoundException - throws if scope is not found