Skip to content

Latest commit

 

History

History
55 lines (43 loc) · 2.47 KB

README.md

File metadata and controls

55 lines (43 loc) · 2.47 KB
Raw

buji-pac4j implements dynamic authority

The authority of filter was defied at properties in most project of pac4j, I need a dynamic authority of request'url which can load data from database, so I changed the project to achieve the function.

You should ensure that the login config works well, when you read next content

Inject the authority of the user

  • Create a abstract class CustomAdminAuthGenerator and extends class AuthorizationGenerator
  • Override generate method
  • Create a abstract method initUserPermissions and invoke it in generate
public abstract class CustomAdminAuthGenerator implements AuthorizationGenerator<CommonProfile> {

    @Override
    public CommonProfile generate(final WebContext context, final CommonProfile profile) {
        profile.addPermissions(this.initUserPermissions(profile.getId()));
        profile.clearSensitiveData(); // remove the access token to reduce size and make the remember-me work
        profile.setRemembered(true);
        return profile;
    }
    
    public abstract List<String> initUserPermissions(String credentials);
}

Inject the authority of the url

  • It has the same steps as before
  • There has a method isAnyAccessAllowed in the follow class, its in order to change need all to any one of the the permissions
public abstract class CustomPermissionsAuthorizationFilter extends PermissionsAuthorizationFilter {

    @Override
    public boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue) throws IOException {
        // use your services to load permissions
        HttpServletRequest req = (HttpServletRequest) request;
        List<String> iniPermissions = new ArrayList<>(Arrays.asList((String[]) mappedValue));

        iniPermissions.addAll(this.initDynamicPermissions(req.getRequestURI()));
        String[] perms = iniPermissions.toArray(new String[0]);

        return this.isAnyAccessAllowed(request, response, perms);
    }

    public abstract List<String> initDynamicPermissions(String requestUri);
}

Other useful tips

  • You can change your callback url to previous instead of a static url, there is example in io.buji.pac4j.custom.CustomLogoutFilter
  • Pac4jRealm can add your own information to Pac4jSubjectFactory
  • SpringBeanAutowiringSupport.processInjectionBasedOnCurrentContext(this); can resolve the problem of @Autowire

you can see the demo dynamic-pac4j-demo for this project