[seam-commits] Seam SVN: r8649 - in branches/Seam_2_0/src/main/org/jboss/seam: web and 1 other directory.

Author: dan.j.allen Date: 2008-08-10 12:31:18 -0400 (Sun, 10 Aug 2008) New Revision: 8649 Added: branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityFilter.java branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityRequestWrapper.java Modified: branches/Seam_2_0/src/main/org/jboss/seam/web-2.0.xsd Log: JBSEAM-3249 Added: branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityFilter.java =================================================================== --- branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityFilter.java (rev 0) +++ branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityFilter.java 2008-08-10 16:31:18 UTC (rev 8649) @@ -0,0 +1,40 @@ +package org.jboss.seam.web; + +import java.io.IOException; +import javax.servlet.FilterChain; +import javax.servlet.ServletException; +import javax.servlet.ServletRequest; +import javax.servlet.ServletResponse; +import javax.servlet.http.HttpServletRequest; +import org.jboss.seam.ScopeType; +import org.jboss.seam.annotations.Install; +import org.jboss.seam.annotations.Name; +import org.jboss.seam.annotations.Scope; +import org.jboss.seam.annotations.intercept.BypassInterceptors; +import org.jboss.seam.annotations.web.Filter; + +/** + * A filter that provides integration between Servlet Security and the Seam + * identity component. This integration is accomplished by wrapping the + * HttpServletRequest with an HttpServletRequestWrapper implementation that + * delegates security-related calls to the Seam identity component. + * + * @author Dan Allen + */ +(a)Scope(ScopeType.APPLICATION) +(a)Name(&quot;org.jboss.seam.web.identityFilter&quot;) +@Install(precedence = Install.BUILT_IN, dependencies = "org.jboss.seam.security.identity") +@BypassInterceptors +@Filter(within = {"org.jboss.seam.web.multipartFilter"}) +public class IdentityFilter extends AbstractFilter { + + public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) + throws IOException, ServletException { + if (!(request instanceof HttpServletRequest)) { + throw new ServletException("This filter can only process HttpServletRequest requests"); + } + + HttpServletRequest httpRequest = (HttpServletRequest) request; + chain.doFilter(new IdentityRequestWrapper(httpRequest), response); + } +} Added: branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityRequestWrapper.java =================================================================== --- branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityRequestWrapper.java (rev 0) +++ branches/Seam_2_0/src/main/org/jboss/seam/web/IdentityRequestWrapper.java 2008-08-10 16:31:18 UTC (rev 8649) @@ -0,0 +1,39 @@ +package org.jboss.seam.web; + +import java.security.Principal; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletRequestWrapper; +import org.jboss.seam.Seam; +import org.jboss.seam.security.Identity; + +/** + * An HttpServletRequestWrapper implementation that provides integration + * between Servlet Security and the Seam identity component. + * + * @author Dan Allen + */ +class IdentityRequestWrapper extends HttpServletRequestWrapper { + + private Identity identity; + + public IdentityRequestWrapper(HttpServletRequest request) { + super(request); + identity = (Identity) request.getSession(). + getAttribute(Seam.getComponentName(Identity.class)); + } + + @Override + public String getRemoteUser() { + return getUserPrincipal() != null ? getUserPrincipal().getName() : null; + } + + @Override + public Principal getUserPrincipal() { + return Identity.isSecurityEnabled() ? identity.getPrincipal() : null; + } + + @Override + public boolean isUserInRole(String role) { + return getUserPrincipal() != null ? identity.hasRole(role) : false; + } +} Modified: branches/Seam_2_0/src/main/org/jboss/seam/web-2.0.xsd =================================================================== --- branches/Seam_2_0/src/main/org/jboss/seam/web-2.0.xsd 2008-08-09 21:32:20 UTC (rev 8648) +++ branches/Seam_2_0/src/main/org/jboss/seam/web-2.0.xsd 2008-08-10 16:31:18 UTC (rev 8649) @@ -4,6 +4,13 @@ xmlns:components="http://jboss.com/products/seam/components" attributeFormDefault="unqualified"> <xs:import namespace="http://jboss.com/products/seam/components" schemaLocation="components-2.0.xsd"/> + <xs:element name="identity-filter"> + <xs:complexType mixed="true"> + <xs:attributeGroup ref="components:attlist.component"/> + <xs:attributeGroup ref="web:attlist.filter"/> + </xs:complexType> + </xs:element> + <xs:element name="multipart-filter"> <xs:complexType mixed="true"> <xs:attributeGroup ref="components:attlist.component"/>