-
Notifications
You must be signed in to change notification settings - Fork 1.9k
/
ConstraintAware.java
68 lines (58 loc) · 2.07 KB
/
ConstraintAware.java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
//
// ========================================================================
// Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.
//
// This program and the accompanying materials are made available under the
// terms of the Eclipse Public License v. 2.0 which is available at
// https://www.eclipse.org/legal/epl-2.0, or the Apache License, Version 2.0
// which is available at https://www.apache.org/licenses/LICENSE-2.0.
//
// SPDX-License-Identifier: EPL-2.0 OR Apache-2.0
// ========================================================================
//
package org.eclipse.jetty.ee.security;
import java.util.List;
import java.util.Set;
public interface ConstraintAware
{
List<ConstraintMapping> getConstraintMappings();
Set<String> getKnownRoles();
/**
* Set Constraint Mappings and roles.
* Can only be called during initialization.
*
* @param constraintMappings the mappings
* @param roles the roles
*/
void setConstraintMappings(List<ConstraintMapping> constraintMappings, Set<String> roles);
/**
* Add a Constraint Mapping.
* May be called for running webapplication as an annotated servlet is instantiated.
*
* @param mapping the mapping
*/
void addConstraintMapping(ConstraintMapping mapping);
/**
* Add a Role definition.
* May be called on running webapplication as an annotated servlet is instantiated.
*
* @param role the role
*/
void addKnownRole(String role);
/**
* See Servlet Spec 31, sec 13.8.4, pg 145
* When true, requests with http methods not explicitly covered either by inclusion or omissions
* in constraints, will have access denied.
*
* @param deny true for denied method access
*/
void setDenyUncoveredHttpMethods(boolean deny);
boolean isDenyUncoveredHttpMethods();
/**
* See Servlet Spec 31, sec 13.8.4, pg 145
* Container must check if there are urls with uncovered http methods
*
* @return true if urls with uncovered http methods
*/
boolean checkPathsWithUncoveredHttpMethods();
}