1 // ========================================================================
2 // Copyright (c) 2006-2010 Mort Bay Consulting Pty. Ltd.
3 // ------------------------------------------------------------------------
4 // All rights reserved. This program and the accompanying materials
5 // are made available under the terms of the Eclipse Public License v1.0
6 // and Apache License v2.0 which accompanies this distribution.
7 // The Eclipse Public License is available at
8 // http://www.eclipse.org/legal/epl-v10.html
9 // The Apache License v2.0 is available at
10 // http://www.opensource.org/licenses/apache2.0.php
11 // You may elect to redistribute this code under either of these licenses.
12 // ========================================================================
13
14 package org.eclipse.jetty.annotations;
15
16 import javax.servlet.Servlet;
17
18 import javax.annotation.security.DeclareRoles;
19 import org.eclipse.jetty.annotations.AnnotationIntrospector.AbstractIntrospectableAnnotationHandler;
20 import org.eclipse.jetty.security.ConstraintSecurityHandler;
21 import org.eclipse.jetty.webapp.WebAppContext;
22
23 /**
24 * DeclaresRolesAnnotationHandler
25 *
26 *
27 */
28 public class DeclareRolesAnnotationHandler extends AbstractIntrospectableAnnotationHandler
29 {
30
31 protected WebAppContext _context;
32
33 /**
34 * @param context
35 */
36 public DeclareRolesAnnotationHandler(WebAppContext context)
37 {
38 super(false);
39 _context = context;
40 }
41
42
43 /**
44 * @see org.eclipse.jetty.annotations.AnnotationIntrospector.AbstractIntrospectableAnnotationHandler#doHandle(java.lang.Class)
45 */
46 public void doHandle(Class clazz)
47 {
48 if (!Servlet.class.isAssignableFrom(clazz))
49 return; //only applicable on javax.servlet.Servlet derivatives
50
51 DeclareRoles declareRoles = (DeclareRoles) clazz.getAnnotation(DeclareRoles.class);
52 if (declareRoles == null)
53 return;
54
55 String[] roles = declareRoles.value();
56
57 if (roles != null && roles.length > 0)
58 {
59 for (String r:roles)
60 ((ConstraintSecurityHandler)_context.getSecurityHandler()).addRole(r);
61 }
62 }
63
64 }