org.codehaus.groovy.grails.plugins.springsecurity.ldap.GrailsLdapRoleMapper.java Source code

Introduction

Here is the source code for org.codehaus.groovy.grails.plugins.springsecurity.ldap.GrailsLdapRoleMapper.java

Source

/* Copyright 2006-2012 SpringSource.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.codehaus.groovy.grails.plugins.springsecurity.ldap;

import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.Attribute;
import javax.naming.directory.Attributes;

import org.springframework.ldap.core.AttributesMapper;
import org.springframework.security.core.authority.GrantedAuthorityImpl;

/**
 * Copied from the private implementation in <code>LdapUserDetailsManager</code> to allow overriding.
 *
 * @author <a href='mailto:burt@burtbeckwith.com'>Burt Beckwith</a>
 */
public class GrailsLdapRoleMapper implements AttributesMapper {

    private String _groupRoleAttributeName;
    private String _rolePrefix = "ROLE_";

    /**
     * {@inheritDoc}
     * @see org.springframework.ldap.core.AttributesMapper#mapFromAttributes(javax.naming.directory.Attributes)
     */
    public Object mapFromAttributes(final Attributes attributes) throws NamingException {
        Attribute roleAttr = attributes.get(_groupRoleAttributeName);

        NamingEnumeration<?> ne = roleAttr.getAll();
        // assert ne.hasMore();
        Object group = ne.next();
        String role = group.toString();

        return new GrantedAuthorityImpl(_rolePrefix + role.toUpperCase());
    }

    /**
     * Dependency injection for <code>groupRoleAttributeName</code>.
     * @param name the name
     */
    public void setGroupRoleAttributeName(final String name) {
        _groupRoleAttributeName = name;
    }

    /**
     * Dependency injection for <code>rolePrefix</code>.
     * @param rolePrefix defaults to 'ROLE_'.  Changing this is not recommended.
     */
    public void setRolePrefix(final String rolePrefix) {
        _rolePrefix = rolePrefix;
    }

}