Package javax.ws.rs

Examples of javax.ws.rs.NotAuthorizedException

47
48
49
50
51
52
53
54
        try {
            LOG.debug("Checking authorization for user {}, needs permissions {}", subject, annotation.value());
            new ContextAwarePermissionAnnotationHandler(context).assertAuthorized(annotation);
        } catch (AuthorizationException e) {
            LOG.info("User not authorized.", e);
            throw new NotAuthorizedException(e, "Basic realm=\"Graylog2 Server\"");
        }
    }
View Full Code Here
49
50
51
52
53
54
55
56
57
58
59
60
                LOG.trace("Logging in {}", context.getSubject());
                context.loginSubject();

            } catch (LockedAccountException e) {
                LOG.debug("Unable to authenticate user, account is locked.", e);
                throw new NotAuthorizedException(e, "Basic realm=\"Graylog2 Server\"");
            } catch (AuthenticationException e) {
                LOG.debug("Unable to authenticate user.", e);
                throw new NotAuthorizedException(e, "Basic realm=\"Graylog2 Server\"");
            }
        }
    }
View Full Code Here
87
88
89
90
91
92
93
        return new NotFoundException(checkResponse(response, 404), cause);
    }
   
    public static NotAuthorizedException toNotAuthorizedException(Throwable cause, Response response) {
       
        return new NotAuthorizedException(checkResponse(response, 401), cause);
    }
View Full Code Here
89
90
91
92
93
94
95
        return new NotFoundException(checkResponse(response, 404), cause);
    }
   
    public static NotAuthorizedException toNotAuthorizedException(Throwable cause, Response response) {
       
        return new NotAuthorizedException(checkResponse(response, 401), cause);
    }
View Full Code Here
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
       
        List<String> authHeaders = messageContext.getHttpHeaders()
            .getRequestHeader(HttpHeaders.AUTHORIZATION);
        if (authHeaders.size() != 1) {
            LOG.fine("No Authorization header is available");
            throw new NotAuthorizedException(getFaultResponse());
        }
        String[] authPair = authHeaders.get(0).split(" ");
        if (authPair.length != 2 || !NEGOTIATE_SCHEME.equalsIgnoreCase(authPair[0])) {
            LOG.fine("Negotiate Authorization scheme is expected");
            throw new NotAuthorizedException(getFaultResponse());
        }
               
        byte[] serviceTicket = getServiceTicket(authPair[1]);
       
        try {
            Subject serviceSubject = loginAndGetSubject();
           
            GSSContext gssContext = createGSSContext();

            Subject.doAs(serviceSubject, new ValidateServiceTicketAction(gssContext, serviceTicket));
           
            GSSName srcName = gssContext.getSrcName();
            if (srcName == null) {
                throw new NotAuthorizedException(getFaultResponse());
            }
           
            String complexUserName = srcName.toString();
           
            String simpleUserName = complexUserName;
            int index = simpleUserName.lastIndexOf('@');
            if (index > 0) {
                simpleUserName = simpleUserName.substring(0, index);
            }
            if (!gssContext.getCredDelegState()) {
                gssContext.dispose();
                gssContext = null;
            }

            m.put(SecurityContext.class,
                new KerberosSecurityContext(new KerberosPrincipal(simpleUserName,
                                                                  complexUserName),
                                            gssContext));
           
        } catch (LoginException e) {
            LOG.fine("Unsuccessful JAAS login for the service principal");
            throw new NotAuthorizedException(getFaultResponse());
        } catch (GSSException e) {
            LOG.fine("GSS API exception: " + e.getMessage());
            throw new NotAuthorizedException(getFaultResponse());
        } catch (PrivilegedActionException e) {
            LOG.fine("PrivilegedActionException: " + e.getMessage());
            throw new NotAuthorizedException(getFaultResponse());
        }
       
        return null;
    }
View Full Code Here
161
162
163
164
165
166
167
168
   
    private byte[] getServiceTicket(String encodedServiceTicket) {
        try {
            return Base64Utility.decode(encodedServiceTicket);
        } catch (Base64Exception ex) {
            throw new NotAuthorizedException(getFaultResponse());
        }
    }
View Full Code Here
186
187
188
189
190
191
192
193
194
                client = getAndValidateClient(authInfo[0], authInfo[1]);
            }
        }
       
        if (client == null) {
            throw new NotAuthorizedException(Response.status(401).build());
        }
        return client;
    }
View Full Code Here
203
204
205
206
207
208
209
210
211
            return client;
        }
        if (clientSecret == null || client.getClientSecret() == null
            || !client.getClientId().equals(clientId)
            || !client.getClientSecret().equals(clientSecret)) {
            throw new NotAuthorizedException(Response.status(401).build());
        }
        return client;
    }
View Full Code Here
298
299
300
301
302
303
304
        reportInvalidClient(new OAuthError(OAuthConstants.INVALID_CLIENT));
    }
   
    protected void reportInvalidClient(OAuthError error) {
        ResponseBuilder rb = Response.status(401);
        throw new NotAuthorizedException(rb.type(MediaType.APPLICATION_JSON_TYPE).entity(error).build());
    }
View Full Code Here
934
935
936
937
938
939
940
941
942
943
944
            } else switch (status) {
                case BAD_REQUEST:
                    webAppException = new BadRequestException(response);
                    break;
                case UNAUTHORIZED:
                    webAppException = new NotAuthorizedException(response);
                    break;
                case FORBIDDEN:
                    webAppException = new ForbiddenException(response);
                    break;
                case NOT_FOUND:
View Full Code Here
TOP

Related Classes of javax.ws.rs.NotAuthorizedException

  • com.ndriven.jive.cloud.examples.addon.rest.DiagnosticsResource
  • com.ndriven.jive.cloud.examples.addon.rest.ResourceBase
  • com.restfully.shop.features.OneTimePasswordAuthenticator
  • org.apache.cxf.jaxrs.security.KerberosAuthenticationFilter
  • org.apache.cxf.jaxrs.utils.SpecExceptions
  • org.apache.cxf.rs.security.oauth.utils.OAuthUtils
  • org.apache.cxf.rs.security.oauth2.auth.saml.Saml2BearerAuthHandler
  • org.apache.cxf.rs.security.oauth2.saml.SamlOAuthValidator
  • org.apache.cxf.rs.security.oauth2.services.AbstractTokenService
  • org.apache.cxf.rs.security.oauth2.services.AccessTokenService
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.