1 //
2 // ========================================================================
3 // Copyright (c) 1995-2013 Mort Bay Consulting Pty. Ltd.
4 // ------------------------------------------------------------------------
5 // All rights reserved. This program and the accompanying materials
6 // are made available under the terms of the Eclipse Public License v1.0
7 // and Apache License v2.0 which accompanies this distribution.
8 //
9 // The Eclipse Public License is available at
10 // http://www.eclipse.org/legal/epl-v10.html
11 //
12 // The Apache License v2.0 is available at
13 // http://www.opensource.org/licenses/apache2.0.php
14 //
15 // You may elect to redistribute this code under either of these licenses.
16 // ========================================================================
17 //
18
19 package org.eclipse.jetty.annotations;
20
21 import javax.annotation.security.DeclareRoles;
22 import javax.servlet.Servlet;
23
24 import org.eclipse.jetty.annotations.AnnotationIntrospector.AbstractIntrospectableAnnotationHandler;
25 import org.eclipse.jetty.security.ConstraintSecurityHandler;
26 import org.eclipse.jetty.webapp.WebAppContext;
27
28 /**
29 * DeclaresRolesAnnotationHandler
30 *
31 *
32 */
33 public class DeclareRolesAnnotationHandler extends AbstractIntrospectableAnnotationHandler
34 {
35
36 protected WebAppContext _context;
37
38 /**
39 * @param context
40 */
41 public DeclareRolesAnnotationHandler(WebAppContext context)
42 {
43 super(false);
44 _context = context;
45 }
46
47
48 /**
49 * @see org.eclipse.jetty.annotations.AnnotationIntrospector.AbstractIntrospectableAnnotationHandler#doHandle(java.lang.Class)
50 */
51 public void doHandle(Class clazz)
52 {
53 if (!Servlet.class.isAssignableFrom(clazz))
54 return; //only applicable on javax.servlet.Servlet derivatives
55
56 DeclareRoles declareRoles = (DeclareRoles) clazz.getAnnotation(DeclareRoles.class);
57 if (declareRoles == null)
58 return;
59
60 String[] roles = declareRoles.value();
61
62 if (roles != null && roles.length > 0)
63 {
64 for (String r:roles)
65 ((ConstraintSecurityHandler)_context.getSecurityHandler()).addRole(r);
66 }
67 }
68
69 }