Examples of org.apache.shiro.realm.AuthorizingRealm

org.apache.shiro.realm.AuthorizingRealm

An {@code AuthorizingRealm} extends the {@code AuthenticatingRealm}'s capabilities by adding Authorization (access control) support.

This implementation will perform all role and permission checks automatically (and subclasses do not have to write this logic) as long as the {@link #getAuthorizationInfo(org.apache.shiro.subject.PrincipalCollection)} method returns an{@link AuthorizationInfo}. Please see that method's JavaDoc for an in-depth explanation.

If you find that you do not want to utilize the {@link AuthorizationInfo AuthorizationInfo} construct,you are of course free to subclass the {@link AuthenticatingRealm AuthenticatingRealm} directly instead andimplement the remaining Realm interface methods directly. You might do this if you want have better control over how the Role and Permission checks occur for your specific data source. However, using AuthorizationInfo (and its default implementation {@link org.apache.shiro.authz.SimpleAuthorizationInfo SimpleAuthorizationInfo}) is sufficient in the large majority of Realm cases. @author Les Hazlewood @author Jeremy Haile @see org.apache.shiro.authz.SimpleAuthorizationInfo @since 0.2

        new SimpleAccountRealm();
    }


    @Test(expected = UnsupportedTokenException.class)
    public void beforeAttemptRealmDoesntSupportToken() {
        Realm notSupportingRealm = new AuthorizingRealm() {


            public boolean supports(AuthenticationToken token) {
                return false;
            }

    JSON realmsJSON = config.getJSON("realms");


    Iterable beans = manager.resolveBeans(AuthorizingRealm.class);
    for (Object bean : beans) {
      Object instance = manager.createContext(bean);
      AuthorizingRealm realm = AuthorizingRealm.class.cast(manager.getInstance(bean, instance));
      JSON realmJSON = realmsJSON.getJSON(realm.getClass().getName());
      if (realmJSON != null) {
        if (realmJSON.get("name") != null) {
          realm.setName(realmJSON.getString("name"));
        }


        Collection<Realm> realms = ((RealmSecurityManager)currentManager).getRealms();
        if (realms == null) {
          ((RealmSecurityManager)currentManager).setRealm(realm);

Examples of org.apache.shiro.realm.AuthorizingRealm

Related Classes of org.apache.shiro.realm.AuthorizingRealm