software.coolstuff.springframework.owncloud.service.api

Interface OwncloudGrantedAuthoritiesMapper

Functional Interface:

This is a functional interface and can therefore be used as the assignment target for a lambda expression or method reference.

@FunctionalInterface
public interface OwncloudGrantedAuthoritiesMapper

An Implementation of this Interface can be seen as an Alternative to GrantedAuthoritiesMapper.

If you want to implement any GrantedAuthority based on the User then any Implementation of GrantedAuthoritiesMapper will be of no use because GrantedAuthoritiesMapper.mapAuthorities(Collection) only gets a Collection of GrantedAuthority.

By implementing this Interface you also get the Username of the authenticated Owncloud User as a Decision Base for the granted Authorities. So you can implement the following Authentication-Structure (based on Spring Security JDBC):

              +-------------+           +--------------+
              | Users       |           | Authorities  |
              +-------------+           +--------------+
              | PK username |           | PK authority |
              +-------------+           +--------------+
                     |                          |
            +--------+-------+         +--------+-------+
           /|\              /|\       /|\              /|\
   +-----------------+   +-----------------+   +------------------+
   | Memberships     |   | UserAuthorities |   | GroupAuthorities |
   +-----------------+   +-----------------+   +------------------+
   | PK FK username  |   | PK FK username  |   | PK FK groupname  |
   | PK FK groupname |   | PK FK authority |   | PK FK authority  |
   +-----------------+   +-----------------+   +------------------+
           \|/                                         \|/
            +---------------------+---------------------+
                                  |
                           +--------------+
                           | Groups       |
                           +--------------+
                           | PK groupname |
                           +--------------+
 

Whereas the Tables Users, Groups and Memberships are implemented by Owncloud.

So, in simple Words, by implementing this Interface as a Service you can put the Authorities of your own Application into the OwncloudUserDetails Object returned by the OwncloudRestUserDetailsServiceImpl.loadUserByUsername(String)

Since:

1.0.0

See Also:

GrantedAuthoritiesMapper

Method Summary

Modifier and Type	Method and Description
Collection<? extends org.springframework.security.core.GrantedAuthority>	mapAuthorities(String username, Collection<? extends org.springframework.security.core.GrantedAuthority> grantedAuthorities)

Method Detail

mapAuthorities

Collection<? extends org.springframework.security.core.GrantedAuthority> mapAuthorities(String username,
                                                                                        Collection<? extends org.springframework.security.core.GrantedAuthority> grantedAuthorities)