org.apache.nifi.web.security.authorization

Class NiFiAuthorizationService

java.lang.Object

org.apache.nifi.web.security.authorization.NiFiAuthorizationService

All Implemented Interfaces:

org.springframework.security.core.userdetails.UserDetailsService

public class NiFiAuthorizationService
extends Object
implements org.springframework.security.core.userdetails.UserDetailsService

UserDetailsService that will verify user identity and grant user authorities.

Field Summary

Fields

Modifier and Type	Field and Description
private static org.slf4j.Logger	logger
private NiFiProperties	properties
private UserService	userService

Constructor Summary

Constructors

Constructor and Description
NiFiAuthorizationService()

Method Summary

Methods

Modifier and Type	Method and Description
private NiFiUserDetails	getNiFiUserDetails(String dn) Loads the user details for the specified dn.
org.springframework.security.core.userdetails.UserDetails	loadUserByUsername(String rawProxyChain) Loads the user details for the specified dn.
void	setProperties(NiFiProperties properties)
void	setUserService(UserService userService)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

private static final org.slf4j.Logger logger

userService

private UserService userService

properties

private NiFiProperties properties

Constructor Detail

NiFiAuthorizationService

public NiFiAuthorizationService()

Method Detail

loadUserByUsername

public org.springframework.security.core.userdetails.UserDetails loadUserByUsername(String rawProxyChain)
                                                                             throws org.springframework.security.core.userdetails.UsernameNotFoundException,
                                                                                    org.springframework.dao.DataAccessException

Loads the user details for the specified dn. Synchronizing because we want each request to be authorized atomically since each may contain any number of DNs. We wanted an access decision made for each individual request as a whole (without other request potentially impacting it).

Specified by:

loadUserByUsername in interface org.springframework.security.core.userdetails.UserDetailsService

Parameters:

rawProxyChain -

Returns:

Throws:

org.springframework.security.core.userdetails.UsernameNotFoundException

org.springframework.dao.DataAccessException

getNiFiUserDetails

private NiFiUserDetails getNiFiUserDetails(String dn)

Loads the user details for the specified dn.

Parameters:

dn -

Returns:

setUserService

public void setUserService(UserService userService)

setProperties

public void setProperties(NiFiProperties properties)