EE10 :: Servlet 12.0.6 · org.eclipse.jetty.ee10.servlet.security.ConstraintSecurityHandler

Modifier and Type	Field and Description
private final List<ConstraintMapping>	_constraintMappings
private final PathMappings<Map<String, Constraint>>	_constraintsByPathAndMethod
private boolean	_denyUncoveredMethods
private final List<ConstraintMapping>	_durableConstraintMappings
private final Set<String>	_roles
private static final String	ALL_METHODS
public static final String	ANY_KNOWN_ROLE
public static final String	ANY_ROLE
private static final Logger	LOG Hides org.eclipse.jetty.security.SecurityHandler.LOG.
private static final String	OMISSION_SUFFIX

Access	Constructor and Description
public	ConstraintSecurityHandler()

Method Summary

Modifier and Type	Method and Description
public void	addConstraintMapping(ConstraintMapping the mapping mapping) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addConstraintMapping. Add a Constraint Mapping.
public void	addKnownRole(String the role role) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addKnownRole. Add a Role definition.
public boolean	checkPathsWithUncoveredHttpMethods() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.checkPathsWithUncoveredHttpMethods. Servlet spec 3.1 pg.
protected Constraint	Returns: The combination as per the servlet specification. combineServletConstraints(Constraint A constraint constraintA, Constraint B constraint constraintB) Combine constrains as per the servlet specification.
public static Constraint	Returns: the created constraint createConstraint(String the name name, HttpConstraintElement the http constraint element element) Create a Constraint
public static Constraint	Returns: the created constraint createConstraint(String the name name, String[] the list of allowed roles rolesAllowed, ServletSecurity.EmptyRoleSemantic the permission semantic permitOrDeny, ServletSecurity.TransportGuarantee the transport guarantee transport) Create Constraint
public static List<ConstraintMapping>	Returns: the list of constraint mappings createConstraintsWithMappingsForPath(String the name name, String the path spec pathSpec, ServletSecurityElement the servlet security element securityElement) Generate Constraints and ConstraintMappings for the given url pattern and ServletSecurityElement
protected void	doStart() Overrides org.eclipse.jetty.security.SecurityHandler.doStart. Starts the managed lifecycle beans in the order they were added.
protected void	doStop() Overrides org.eclipse.jetty.security.SecurityHandler.doStop. Stops the managed lifecycle beans in the reverse order they were added.
public void	dump(Appendable The appendable to dump to out, String The indent to apply after any new lines. indent) Overrides org.eclipse.jetty.util.component.ContainerLifeCycle.dump. Implements org.eclipse.jetty.util.component.Dumpable.dump. Dump this object (and children) into an Appendable using the provided indent after any new lines.
protected Constraint	getConstraint(String pathInContext, Request request) Implements abstract org.eclipse.jetty.security.SecurityHandler.getConstraint.
public List<ConstraintMapping>	getConstraintMappings() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getConstraintMappings.
public Set<String>	getKnownRoles() Overrides org.eclipse.jetty.security.SecurityHandler.getKnownRoles. Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getKnownRoles.
protected Set<String>	Returns: the set of strings getOmittedMethods(String the method omission) Given a string of the form `<method>.`
public Set<String>	Returns: Set of paths for which there are uncovered methods getPathsWithUncoveredHttpMethods() Servlet spec 3.1 pg.
public boolean	isDenyUncoveredHttpMethods() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.isDenyUncoveredHttpMethods.
private boolean	Returns: true if the context with which this ConstraintSecurityHandler has not yet started, or if there is no context, the server has not yet started. isInDurableState() Constraints can be added to the ConstraintSecurityHandler before the associated context is started.
protected boolean	Returns: true if omission exist omissionsExist(Map<String, Constraint> the method mappings methodMappings) Check if any http method omissions exist in the list of method to auth info mappings.
protected void	processConstraintMapping(ConstraintMapping the constraint mapping mapping) Create and combine the constraint with the existing processed constraints.
protected void	processConstraintMappingWithMethodOmissions(ConstraintMapping the constraint mapping mapping, Map<String, Constraint> the mappings of roles mappings) Constraints that name method omissions are dealt with differently.
public static List<ConstraintMapping>	Returns: the list of constraint mappings removeConstraintMappingsForPath(String the path spec pathSpec, List<ConstraintMapping> a new list minus the matching constraints constraintMappings) Take out of the constraint mappings those that match the given path.
public void	setConstraintMappings(List<ConstraintMapping> The constraintMappings to set, from which the set of known roles is determined. constraintMappings) Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.
public void	setConstraintMappings(ConstraintMapping[] The constraintMappings to set as array, from which the set of known roles is determined. Needed to retain API compatibility for 7.x constraintMappings) Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.
public void	setConstraintMappings(List<ConstraintMapping> The constraintMappings to set. constraintMappings, Set<String> The known roles (or null to determine them from the mappings) roles) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setConstraintMappings. Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.
public void	setDenyUncoveredHttpMethods(boolean true for denied method access deny) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setDenyUncoveredHttpMethods. See Servlet Spec 31, sec 13.8.4, pg 145 When true, requests with http methods not explicitly covered either by inclusion or omissions in constraints, will have access denied.
public void	setRoles(Set<String> The known roles (or null to determine them from the mappings) roles) Set the known roles.

_constraintMappings	back to summary
private final List<ConstraintMapping> _constraintMappings

_constraintsByPathAndMethod	back to summary
private final PathMappings<Map<String, Constraint>> _constraintsByPathAndMethod

_denyUncoveredMethods	back to summary
private boolean _denyUncoveredMethods

_durableConstraintMappings	back to summary
private final List<ConstraintMapping> _durableConstraintMappings

_roles	back to summary
private final Set<String> _roles

ALL_METHODS	back to summary
private static final String ALL_METHODS

ANY_KNOWN_ROLE	back to summary
public static final String ANY_KNOWN_ROLE

ANY_ROLE	back to summary
public static final String ANY_ROLE

LOG	back to summary
private static final Logger LOG Hides org.eclipse.jetty.security.SecurityHandler.LOG.

OMISSION_SUFFIX	back to summary
private static final String OMISSION_SUFFIX

ConstraintSecurityHandler	back to summary
public ConstraintSecurityHandler()

Method Detail

addConstraintMapping	back to summary
public void addConstraintMapping(ConstraintMapping mapping) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addConstraintMapping. Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addConstraintMapping. Add a Constraint Mapping. May be called for running webapplication as an annotated servlet is instantiated. Parameters mapping:ConstraintMapping the mapping Annotations @Override

addConstraintMapping

back to summary

public void addConstraintMapping(ConstraintMapping mapping)

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addConstraintMapping.

Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addConstraintMapping.

Add a Constraint Mapping. May be called for running webapplication as an annotated servlet is instantiated.

Parameters

mapping:ConstraintMapping: the mapping

Annotations

@Override

addKnownRole	back to summary
public void addKnownRole(String role) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addKnownRole. Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addKnownRole. Add a Role definition. May be called on running webapplication as an annotated servlet is instantiated. Parameters role:String the role Annotations @Override

addKnownRole

back to summary

public void addKnownRole(String role)

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addKnownRole.

Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.addKnownRole.

Add a Role definition. May be called on running webapplication as an annotated servlet is instantiated.

Parameters

role:String: the role

Annotations

@Override

checkPathsWithUncoveredHttpMethods	back to summary
public boolean checkPathsWithUncoveredHttpMethods() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.checkPathsWithUncoveredHttpMethods. Servlet spec 3.1 pg. 147. Returns:boolean Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.checkPathsWithUncoveredHttpMethods. true if urls with uncovered http methods Annotations @Override

checkPathsWithUncoveredHttpMethods

back to summary

public boolean checkPathsWithUncoveredHttpMethods()

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.checkPathsWithUncoveredHttpMethods.

Servlet spec 3.1 pg. 147.

Returns:boolean

Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.checkPathsWithUncoveredHttpMethods.

true if urls with uncovered http methods

Annotations

@Override

combineServletConstraints back to summary

combineServletConstraints	back to summary
protected Constraint combineServletConstraints(Constraint constraintA, Constraint constraintB) Combine constrains as per the servlet specification. This is NOT equivalent to `Constraint#combine(Constraint, Constraint)`, which implements a more secure combination. Parameters constraintA:Constraint A constraint constraintB:Constraint B constraint Returns:Constraint The combination as per the servlet specification.

protected Constraint combineServletConstraints(Constraint constraintA, Constraint constraintB)

Combine constrains as per the servlet specification. This is NOT equivalent to Constraint#combine(Constraint, Constraint), which implements a more secure combination.

Parameters

constraintA:Constraint: A constraint
constraintB:Constraint: B constraint

Returns:Constraint

The combination as per the servlet specification.

createConstraint	back to summary
public static Constraint createConstraint(String name, HttpConstraintElement element) Create a Constraint Parameters name:String the name element:HttpConstraintElement the http constraint element Returns:Constraint the created constraint

createConstraint

back to summary

public static Constraint createConstraint(String name, HttpConstraintElement element)

Create a Constraint

Parameters

name:String: the name
element:HttpConstraintElement: the http constraint element

Returns:Constraint

the created constraint

createConstraint	back to summary
public static Constraint createConstraint(String name, String[] rolesAllowed, ServletSecurity.EmptyRoleSemantic permitOrDeny, ServletSecurity.TransportGuarantee transport) Create Constraint Parameters name:String the name rolesAllowed:String[] the list of allowed roles permitOrDeny:ServletSecurity.EmptyRoleSemantic the permission semantic transport:ServletSecurity.TransportGuarantee the transport guarantee Returns:Constraint the created constraint

createConstraint

back to summary

public static Constraint createConstraint(String name, String[] rolesAllowed, ServletSecurity.EmptyRoleSemantic permitOrDeny, ServletSecurity.TransportGuarantee transport)

Create Constraint

Parameters

name:String: the name
rolesAllowed:String[]: the list of allowed roles
permitOrDeny:ServletSecurity.EmptyRoleSemantic: the permission semantic
transport:ServletSecurity.TransportGuarantee: the transport guarantee

Returns:Constraint

the created constraint

createConstraintsWithMappingsForPath	back to summary
public static List<ConstraintMapping> createConstraintsWithMappingsForPath(String name, String pathSpec, ServletSecurityElement securityElement) Generate Constraints and ConstraintMappings for the given url pattern and ServletSecurityElement Parameters name:String the name pathSpec:String the path spec securityElement:ServletSecurityElement the servlet security element Returns:List<ConstraintMapping> the list of constraint mappings

createConstraintsWithMappingsForPath

back to summary

public static List<ConstraintMapping> createConstraintsWithMappingsForPath(String name, String pathSpec, ServletSecurityElement securityElement)

Generate Constraints and ConstraintMappings for the given url pattern and ServletSecurityElement

Parameters

name:String: the name
pathSpec:String: the path spec
securityElement:ServletSecurityElement: the servlet security element

Returns:List<ConstraintMapping>

the list of constraint mappings

doStart	back to summary
protected void doStart() throws Exception Overrides org.eclipse.jetty.security.SecurityHandler.doStart. Doc from org.eclipse.jetty.util.component.ContainerLifeCycle.doStart. Starts the managed lifecycle beans in the order they were added. Annotations @Override Exceptions Exception: Doc from org.eclipse.jetty.util.component.AbstractLifeCycle.doStart. If there was a problem starting. Will cause a transition to FAILED state

doStart

back to summary

protected void doStart() throws Exception

Overrides org.eclipse.jetty.security.SecurityHandler.doStart.

Doc from org.eclipse.jetty.util.component.ContainerLifeCycle.doStart.

Starts the managed lifecycle beans in the order they were added.

Annotations

@Override

Exceptions

Exception:

Doc from org.eclipse.jetty.util.component.AbstractLifeCycle.doStart.

If there was a problem starting. Will cause a transition to FAILED state

doStop	back to summary
protected void doStop() throws Exception Overrides org.eclipse.jetty.security.SecurityHandler.doStop. Doc from org.eclipse.jetty.util.component.ContainerLifeCycle.doStop. Stops the managed lifecycle beans in the reverse order they were added. Annotations @Override Exceptions Exception: Doc from org.eclipse.jetty.util.component.AbstractLifeCycle.doStop. If there was a problem stopping. Will cause a transition to FAILED state

doStop

back to summary

protected void doStop() throws Exception

Overrides org.eclipse.jetty.security.SecurityHandler.doStop.

Doc from org.eclipse.jetty.util.component.ContainerLifeCycle.doStop.

Stops the managed lifecycle beans in the reverse order they were added.

Annotations

@Override

Exceptions

Exception:

Doc from org.eclipse.jetty.util.component.AbstractLifeCycle.doStop.

If there was a problem stopping. Will cause a transition to FAILED state

dump	back to summary
public void dump(Appendable out, String indent) throws IOException Overrides org.eclipse.jetty.util.component.ContainerLifeCycle.dump. Implements org.eclipse.jetty.util.component.Dumpable.dump. Doc from org.eclipse.jetty.util.component.Dumpable.dump. Dump this object (and children) into an Appendable using the provided indent after any new lines. The indent should not be applied to the first object dumped. Parameters out:Appendable The appendable to dump to indent:String The indent to apply after any new lines. Annotations @Override Exceptions IOException: if unable to write to Appendable

dump

back to summary

public void dump(Appendable out, String indent) throws IOException

Overrides org.eclipse.jetty.util.component.ContainerLifeCycle.dump.

Implements org.eclipse.jetty.util.component.Dumpable.dump.

Doc from org.eclipse.jetty.util.component.Dumpable.dump.

Dump this object (and children) into an Appendable using the provided indent after any new lines. The indent should not be applied to the first object dumped.

Parameters

out:Appendable: The appendable to dump to
indent:String: The indent to apply after any new lines.

Annotations

@Override

Exceptions

IOException:: if unable to write to Appendable

getConstraint	back to summary
protected Constraint getConstraint(String pathInContext, Request request) Implements abstract org.eclipse.jetty.security.SecurityHandler.getConstraint. Annotations @Override

getConstraint

back to summary

protected Constraint getConstraint(String pathInContext, Request request)

Implements abstract org.eclipse.jetty.security.SecurityHandler.getConstraint.

Annotations

@Override

getConstraintMappings	back to summary
public List<ConstraintMapping> getConstraintMappings() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getConstraintMappings. Annotations @Override

getConstraintMappings

back to summary

public List<ConstraintMapping> getConstraintMappings()

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getConstraintMappings.

Annotations

@Override

getKnownRoles	back to summary
public Set<String> getKnownRoles() Overrides org.eclipse.jetty.security.SecurityHandler.getKnownRoles. Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getKnownRoles. Annotations @Override

getKnownRoles

back to summary

public Set<String> getKnownRoles()

Overrides org.eclipse.jetty.security.SecurityHandler.getKnownRoles.

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.getKnownRoles.

Annotations

@Override

getOmittedMethods back to summary

getOmittedMethods	back to summary
protected Set<String> getOmittedMethods(String omission) Given a string of the form `<method>.<method>.omission` split out the individual method names. Parameters omission:String the method Returns:Set<String> the set of strings

protected Set<String> getOmittedMethods(String omission)

Given a string of the form <method>.<method>.omission split out the individual method names.

Parameters

omission:String: the method

Returns:Set<String>

the set of strings

getPathsWithUncoveredHttpMethods	back to summary
public Set<String> getPathsWithUncoveredHttpMethods() Servlet spec 3.1 pg. 147. The container must check all the combined security constraint information and log any methods that are not protected and the urls at which they are not protected Returns:Set<String> Set of paths for which there are uncovered methods

getPathsWithUncoveredHttpMethods

back to summary

public Set<String> getPathsWithUncoveredHttpMethods()

Servlet spec 3.1 pg. 147. The container must check all the combined security constraint information and log any methods that are not protected and the urls at which they are not protected

Returns:Set<String>: Set of paths for which there are uncovered methods

isDenyUncoveredHttpMethods	back to summary
public boolean isDenyUncoveredHttpMethods() Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.isDenyUncoveredHttpMethods. Annotations @Override

isDenyUncoveredHttpMethods

back to summary

public boolean isDenyUncoveredHttpMethods()

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.isDenyUncoveredHttpMethods.

Annotations

@Override

isInDurableState	back to summary
private boolean isInDurableState() Constraints can be added to the ConstraintSecurityHandler before the associated context is started. These constraints should persist across a stop/start. Others can be added after the associated context is starting (eg by a web.xml/web-fragment.xml, annotation or jakarta.servlet api call) - these should not be persisted across a stop/start as they will be re-added on the restart. Returns:boolean true if the context with which this ConstraintSecurityHandler has not yet started, or if there is no context, the server has not yet started.

isInDurableState

back to summary

private boolean isInDurableState()

Constraints can be added to the ConstraintSecurityHandler before the associated context is started. These constraints should persist across a stop/start. Others can be added after the associated context is starting (eg by a web.xml/web-fragment.xml, annotation or jakarta.servlet api call) - these should not be persisted across a stop/start as they will be re-added on the restart.

Returns:boolean: true if the context with which this ConstraintSecurityHandler has not yet started, or if there is no context, the server has not yet started.

omissionsExist	back to summary
protected boolean omissionsExist(Map<String, Constraint> methodMappings) Check if any http method omissions exist in the list of method to auth info mappings. Parameters methodMappings:Map<String, Constraint> the method mappings Returns:boolean true if omission exist

omissionsExist

back to summary

protected boolean omissionsExist(Map<String, Constraint> methodMappings)

Check if any http method omissions exist in the list of method to auth info mappings.

Parameters

methodMappings:Map<String, Constraint>: the method mappings

Returns:boolean

true if omission exist

processConstraintMapping	back to summary
protected void processConstraintMapping(ConstraintMapping mapping) Create and combine the constraint with the existing processed constraints. Parameters mapping:ConstraintMapping the constraint mapping

processConstraintMapping

back to summary

protected void processConstraintMapping(ConstraintMapping mapping)

Create and combine the constraint with the existing processed constraints.

Parameters

mapping:ConstraintMapping: the constraint mapping

processConstraintMappingWithMethodOmissions	back to summary
protected void processConstraintMappingWithMethodOmissions(ConstraintMapping mapping, Map<String, Constraint> mappings) Constraints that name method omissions are dealt with differently. We create an entry in the mappings with key "<method>.omission". This entry is only ever combined with other omissions for the same method to produce a consolidated Constraint. Then, when we wish to find the relevant constraints for a given Request (in prepareConstraintInfo()), we consult 3 types of entries in the mappings: an entry that names the method of the Request specifically, an entry that names constraints that apply to all methods, entries of the form <method>.omission, where the method of the Request is not named in the omission. Parameters mapping:ConstraintMapping the constraint mapping mappings:Map<String, Constraint> the mappings of roles

processConstraintMappingWithMethodOmissions

back to summary

protected void processConstraintMappingWithMethodOmissions(ConstraintMapping mapping, Map<String, Constraint> mappings)

Constraints that name method omissions are dealt with differently. We create an entry in the mappings with key "<method>.omission". This entry is only ever combined with other omissions for the same method to produce a consolidated Constraint. Then, when we wish to find the relevant constraints for a given Request (in prepareConstraintInfo()), we consult 3 types of entries in the mappings: an entry that names the method of the Request specifically, an entry that names constraints that apply to all methods, entries of the form <method>.omission, where the method of the Request is not named in the omission.

Parameters

mapping:ConstraintMapping: the constraint mapping
mappings:Map<String, Constraint>: the mappings of roles

removeConstraintMappingsForPath	back to summary
public static List<ConstraintMapping> removeConstraintMappingsForPath(String pathSpec, List<ConstraintMapping> constraintMappings) Take out of the constraint mappings those that match the given path. Parameters pathSpec:String the path spec constraintMappings:List<ConstraintMapping> a new list minus the matching constraints Returns:List<ConstraintMapping> the list of constraint mappings

removeConstraintMappingsForPath

back to summary

public static List<ConstraintMapping> removeConstraintMappingsForPath(String pathSpec, List<ConstraintMapping> constraintMappings)

Take out of the constraint mappings those that match the given path.

Parameters

pathSpec:String: the path spec
constraintMappings:List<ConstraintMapping>: a new list minus the matching constraints

Returns:List<ConstraintMapping>

the list of constraint mappings

setConstraintMappings	back to summary
public void setConstraintMappings(List<ConstraintMapping> constraintMappings) Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class. Parameters constraintMappings:List<ConstraintMapping> The constraintMappings to set, from which the set of known roles is determined.

setConstraintMappings

back to summary

public void setConstraintMappings(List<ConstraintMapping> constraintMappings)

Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.

Parameters

constraintMappings:List<ConstraintMapping>: The constraintMappings to set, from which the set of known roles is determined.

setConstraintMappings	back to summary
public void setConstraintMappings(ConstraintMapping[] constraintMappings) Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class. Parameters constraintMappings:ConstraintMapping[] The constraintMappings to set as array, from which the set of known roles is determined. Needed to retain API compatibility for 7.x

setConstraintMappings

back to summary

public void setConstraintMappings(ConstraintMapping[] constraintMappings)

Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.

Parameters

constraintMappings:ConstraintMapping[]: The constraintMappings to set as array, from which the set of known roles is determined. Needed to retain API compatibility for 7.x

setConstraintMappings	back to summary
public void setConstraintMappings(List<ConstraintMapping> constraintMappings, Set<String> roles) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setConstraintMappings. Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class. Parameters constraintMappings:List<ConstraintMapping> The constraintMappings to set. roles:Set<String> The known roles (or null to determine them from the mappings) Annotations @Override

setConstraintMappings

back to summary

public void setConstraintMappings(List<ConstraintMapping> constraintMappings, Set<String> roles)

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setConstraintMappings.

Process the constraints following the combining rules in Servlet 3.0 EA spec section 13.7.1 Note that much of the logic is in the Constraint class.

Parameters

constraintMappings:List<ConstraintMapping>: The constraintMappings to set.
roles:Set<String>: The known roles (or null to determine them from the mappings)

Annotations

@Override

setDenyUncoveredHttpMethods	back to summary
public void setDenyUncoveredHttpMethods(boolean deny) Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setDenyUncoveredHttpMethods. Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setDenyUncoveredHttpMethods. See Servlet Spec 31, sec 13.8.4, pg 145 When true, requests with http methods not explicitly covered either by inclusion or omissions in constraints, will have access denied. Parameters deny:boolean true for denied method access Annotations @Override

setDenyUncoveredHttpMethods

back to summary

public void setDenyUncoveredHttpMethods(boolean deny)

Implements org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setDenyUncoveredHttpMethods.

Doc from org.eclipse.jetty.ee10.servlet.security.ConstraintAware.setDenyUncoveredHttpMethods.

See Servlet Spec 31, sec 13.8.4, pg 145 When true, requests with http methods not explicitly covered either by inclusion or omissions in constraints, will have access denied.

Parameters

deny:boolean: true for denied method access

Annotations

@Override

setRoles back to summary

setRoles	back to summary
public void setRoles(Set<String> roles) Set the known roles. This may be overridden by a subsequent call to `setConstraintMappings(ConstraintMapping[])` or `setConstraintMappings(List, Set)`. Parameters roles:Set<String> The known roles (or null to determine them from the mappings)

public void setRoles(Set<String> roles)

Set the known roles. This may be overridden by a subsequent call to setConstraintMappings(ConstraintMapping[]) or setConstraintMappings(List, Set).

Parameters

roles:Set<String>: The known roles (or null to determine them from the mappings)

public Class ConstraintSecurityHandler

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail