org.italiangrid.storm.webdav.authz.util.ReadonlyHTTPMethodMatcher.java Source code

Introduction

Here is the source code for org.italiangrid.storm.webdav.authz.util.ReadonlyHTTPMethodMatcher.java

Source

/**
 * Copyright (c) Istituto Nazionale di Fisica Nucleare, 2014.
 * 
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not
 * use this file except in compliance with the License. You may obtain a copy of
 * the License at
 * 
 * http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 * License for the specific language governing permissions and limitations under
 * the License.
 */
package org.italiangrid.storm.webdav.authz.util;

import java.util.Arrays;
import java.util.Set;
import java.util.TreeSet;

import javax.servlet.http.HttpServletRequest;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
import org.springframework.security.web.util.matcher.RequestMatcher;

public class ReadonlyHTTPMethodMatcher implements RequestMatcher {

    private static final Logger logger = LoggerFactory.getLogger(ReadonlyHTTPMethodMatcher.class);

    // Copy is here since auhtz is done on the 
    // source path, ( and requires read-only access on the source
    // storage area). The other half of the authorization is done
    // in the custom CopyMove authorization voter.
    private static final Set<String> METHODS = new TreeSet<String>(
            Arrays.asList("GET", "HEAD", "OPTIONS", "PROPFIND", "COPY"));

    private final AntPathRequestMatcher pathMatcher;

    public ReadonlyHTTPMethodMatcher(String pattern) {

        pathMatcher = new AntPathRequestMatcher(pattern);
    }

    @Override
    public boolean matches(HttpServletRequest request) {

        if (request.getMethod() == null) {
            if (logger.isDebugEnabled()) {
                logger.debug("null method in incoming request will not match this matcher.");
            }
            return false;
        }

        final boolean methodMatches = METHODS.contains(request.getMethod());

        if (logger.isDebugEnabled() && !methodMatches) {
            logger.debug("Request method '{} {}' does not match with this matcher.", request.getMethod(),
                    getRequestPath(request));
            return methodMatches;
        }

        return methodMatches && pathMatcher.matches(request);

    }

    private String getRequestPath(HttpServletRequest request) {

        String url = request.getServletPath();

        if (request.getPathInfo() != null) {
            url += request.getPathInfo();
        }

        return url;
    }
}