/*
* Copyright 2010 Google Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
* use this file except in compliance with the License. You may obtain a copy of
* the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
* License for the specific language governing permissions and limitations under
* the License.
*/
package com.google.gwt.requestfactory.server;
import com.google.gwt.requestfactory.shared.Service;
/**
* <p>
* <span style="color:red">Experimental API: This class is still under rapid
* development, and is very likely to be deleted. Use it at your own risk.
* </span>
* </p>
* A security provider that enforces {@link com.google.gwt.requestfactory.shared.Service}
* annotations.
*/
public class DefaultSecurityProvider implements RequestSecurityProvider {
public void checkClass(Class<?> clazz) throws SecurityException {
Service service = clazz.getAnnotation(Service.class);
if (service == null) {
throw new SecurityException(
"Class " + clazz.getName() + " does not have a @Service annotation.");
}
try {
Class.forName(service.value().getCanonicalName());
} catch (ClassNotFoundException e) {
throw new SecurityException(
"Class " + service.value() + " from @Service annotation on " + clazz
+ " cannot be loaded.");
}
}
public String encodeClassType(Class<?> type) {
return type.getName();
}
public String mapOperation(String operationName) throws SecurityException {
return operationName;
}
}