org.springframework.cloud.dataflow.server.config.cloudfoundry.security.support

Class CloudFoundrySecurityService

java.lang.Object

org.springframework.cloud.dataflow.server.config.cloudfoundry.security.support.CloudFoundrySecurityService

public class CloudFoundrySecurityService
extends Object

Cloud Foundry security service to handle REST calls to the cloud controller and UAA.

Author:

Madhura Bhave, Gunnar Hillert, Ilayaperumal Gopinathan

Constructor Summary

Constructors

Constructor and Description
CloudFoundrySecurityService(org.springframework.cloud.common.security.core.support.OAuth2TokenUtilsService oauth2TokenUtilsService, org.springframework.web.client.RestTemplate restTemplate, String cloudControllerUrl, String applicationId)

Method Summary

Modifier and Type	Method and Description
AccessLevel	getAccessLevel(String token, String applicationId) Return the access level that should be granted to the given token.
boolean	isSpaceDeveloper() Returns true if the user (using the access-token from OAuth2RestTemplate) has full AccessLevel.FULL for the provided applicationId

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CloudFoundrySecurityService

public CloudFoundrySecurityService(org.springframework.cloud.common.security.core.support.OAuth2TokenUtilsService oauth2TokenUtilsService,
                                   org.springframework.web.client.RestTemplate restTemplate,
                                   String cloudControllerUrl,
                                   String applicationId)

Method Detail

isSpaceDeveloper

public boolean isSpaceDeveloper()

Returns true if the user (using the access-token from OAuth2RestTemplate) has full AccessLevel.FULL for the provided applicationId

Returns:

true of the user is a space developer in Cloud Foundry

getAccessLevel

public AccessLevel getAccessLevel(String token,
                                  String applicationId)
                           throws CloudFoundryAuthorizationException

Return the access level that should be granted to the given token.

Parameters:

token - the token

applicationId - the cloud foundry application ID

Returns:

the access level that should be granted

Throws:

CloudFoundryAuthorizationException - if the token is not authorized