Examples of org.apache.shiro.subject.support.DelegatingSubject

Package org.apache.shiro.subject.support

Examples of org.apache.shiro.subject.support.DelegatingSubject

org.apache.shiro.subject.support.DelegatingSubject
Implementation of the {@code Subject} interface that delegatesmethod calls to an underlying {@link org.apache.shiro.mgt.SecurityManager SecurityManager} instance for security checks.It is essentially a {@code SecurityManager} proxy.
This implementation does not maintain state such as roles and permissions (only {@code Subject}{@link #getPrincipals() principals}, such as usernames or user primary keys) for better performance in a stateless architecture. It instead asks the underlying {@code SecurityManager} every time to performthe authorization check.
A common misconception in using this implementation is that an EIS resource (RDBMS, etc) would be "hit" every time a method is called. This is not necessarily the case and is up to the implementation of the underlying {@code SecurityManager} instance. If caching of authorizationdata is desired (to eliminate EIS round trips and therefore improve database performance), it is considered much more elegant to let the underlying {@code SecurityManager} implementation or its delegate componentsmanage caching, not this class. A {@code SecurityManager} is considered a business-tier component,where caching strategies are better managed.
Applications from large and clustered to simple and JVM-local all benefit from stateless architectures. This implementation plays a part in the stateless programming paradigm and should be used whenever possible. @since 0.1


        String username = "jsmith";


        SecurityManager securityManager = createNiceMock(SecurityManager.class);
        PrincipalCollection identity = new SimplePrincipalCollection(username, "testRealm");
        final Subject sourceSubject = new DelegatingSubject(identity, true, null, null, securityManager);


        assertNull(ThreadContext.getSubject());
        assertNull(ThreadContext.getSecurityManager());


        Runnable runnable = new Runnable() {
            public void run() {
                Subject callingSubject = SecurityUtils.getSubject();
                assertNotNull(callingSubject);
                assertNotNull(SecurityUtils.getSecurityManager());
                assertEquals(callingSubject, sourceSubject);
            }
        };
        sourceSubject.execute(runnable);


        assertNull(ThreadContext.getSubject());
        assertNull(ThreadContext.getSecurityManager());
    }

View Full Code Here

        boolean sessionCreationEnabled = context.isSessionCreationEnabled();
        PrincipalCollection principals = context.resolvePrincipals();
        boolean authenticated = context.resolveAuthenticated();
        String host = context.resolveHost();


        return new DelegatingSubject(principals, authenticated, host, session, sessionCreationEnabled, securityManager);
    }

View Full Code Here

     *             need to instantiate a custom {@link Subject} class.
     */
    @Deprecated
    protected Subject newSubjectInstance(PrincipalCollection principals, boolean authenticated, String host,
                                         Session session, SecurityManager securityManager) {
        return new DelegatingSubject(principals, authenticated, host, session, true, securityManager);
    }

View Full Code Here

    public void testSessionStopThenStart() {
        String key = "testKey";
        String value = "testValue";
        DefaultSecurityManager sm = new DefaultSecurityManager();


        DelegatingSubject subject = new DelegatingSubject(sm);


        Session session = subject.getSession();
        session.setAttribute(key, value);
        assertTrue(session.getAttribute(key).equals(value));
        Serializable firstSessionId = session.getId();
        assertNotNull(firstSessionId);


        session.stop();


        session = subject.getSession();
        assertNotNull(session);
        assertNull(session.getAttribute(key));
        Serializable secondSessionId = session.getId();
        assertNotNull(secondSessionId);
        assertFalse(firstSessionId.equals(secondSessionId));


        subject.logout();


        sm.destroy();
    }

View Full Code Here


        String username = "jsmith";


        SecurityManager securityManager = createNiceMock(SecurityManager.class);
        PrincipalCollection identity = new SimplePrincipalCollection(username, "testRealm");
        final Subject sourceSubject = new DelegatingSubject(identity, true, null, null, securityManager);


        assertNull(ThreadContext.getSubject());
        assertNull(ThreadContext.getSecurityManager());


        Callable<String> callable = new Callable<String>() {
            public String call() throws Exception {
                Subject callingSubject = SecurityUtils.getSubject();
                assertNotNull(callingSubject);
                assertNotNull(SecurityUtils.getSecurityManager());
                assertEquals(callingSubject, sourceSubject);
                return "Hello " + callingSubject.getPrincipal();
            }
        };
        String response = sourceSubject.execute(callable);


        assertNotNull(response);
        assertEquals("Hello " + username, response);


        assertNull(ThreadContext.getSubject());

View Full Code Here


        String username = "jsmith";


        SecurityManager securityManager = createNiceMock(SecurityManager.class);
        PrincipalCollection identity = new SimplePrincipalCollection(username, "testRealm");
        final Subject sourceSubject = new DelegatingSubject(identity, true, null, null, securityManager);


        assertNull(ThreadContext.getSubject());
        assertNull(ThreadContext.getSecurityManager());


        Runnable runnable = new Runnable() {
            public void run() {
                Subject callingSubject = SecurityUtils.getSubject();
                assertNotNull(callingSubject);
                assertNotNull(SecurityUtils.getSecurityManager());
                assertEquals(callingSubject, sourceSubject);
            }
        };
        sourceSubject.execute(runnable);


        assertNull(ThreadContext.getSubject());
        assertNull(ThreadContext.getSecurityManager());
    }

View Full Code Here

        return newSubjectInstance(principals, authenticated, host, session, securityManager);
    }


    protected Subject newSubjectInstance(PrincipalCollection principals, boolean authenticated, String host,
                                         Session session, SecurityManager securityManager) {
        return new DelegatingSubject(principals, authenticated, host, session, securityManager);
    }

View Full Code Here

0 1

TOP

Related Classes of org.apache.shiro.subject.support.DelegatingSubject

org.apache.shiro.mgt.DefaultSubjectFactory

org.apache.shiro.session.mgt.DefaultSessionContext

org.apache.shiro.session.mgt.SessionContext

org.apache.shiro.session.Session

org.apache.shiro.subject.DelegatingSubjectTest

org.apache.shiro.subject.PrincipalCollection

org.apache.shiro.subject.Subject

org.sonatype.nexus.security.NexusHttpAuthenticationFilterTest

org.apache.shiro.subject.ExecutionException

org.apache.shiro.authz.UnauthenticatedException

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.