Commit 54cf0352 authored by miferreiro's avatar miferreiro

Added authentication control for the pet path

parent e345b8eb
...@@ -59,6 +59,13 @@ public class AuthorizationFilter implements ContainerRequestFilter { ...@@ -59,6 +59,13 @@ public class AuthorizationFilter implements ContainerRequestFilter {
} else { } else {
requestContext.setSecurityContext(new UserSecurityContext(user)); requestContext.setSecurityContext(new UserSecurityContext(user));
} }
if (isPetsPath(requestContext) && !user.getRole().equals("ADMIN")) {
requestContext.abortWith(createResponse());
} else {
requestContext.setSecurityContext(new UserSecurityContext(user));
}
} else { } else {
requestContext.abortWith(createResponse()); requestContext.abortWith(createResponse());
} }
...@@ -76,6 +83,11 @@ public class AuthorizationFilter implements ContainerRequestFilter { ...@@ -76,6 +83,11 @@ public class AuthorizationFilter implements ContainerRequestFilter {
return !pathSegments.isEmpty() && pathSegments.get(0).getPath().equals("people"); return !pathSegments.isEmpty() && pathSegments.get(0).getPath().equals("people");
} }
private static boolean isPetsPath(ContainerRequestContext context) {
final List<PathSegment> pathSegments = context.getUriInfo().getPathSegments();
return !pathSegments.isEmpty() && pathSegments.get(0).getPath().equals("pets");
}
private static Response createResponse() { private static Response createResponse() {
return Response.status(Status.UNAUTHORIZED) return Response.status(Status.UNAUTHORIZED)
.header(HttpHeaders.WWW_AUTHENTICATE, "Basic realm=\"DAAExample\"") .header(HttpHeaders.WWW_AUTHENTICATE, "Basic realm=\"DAAExample\"")
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment