Package com.sun.identity.wss.security.handler

Class DefaultAuthorizer

java.lang.Object

com.sun.identity.wss.security.handler.DefaultAuthorizer

All Implemented Interfaces:

MessageAuthorizer

public class DefaultAuthorizer
extends Object
implements MessageAuthorizer

Constructor Summary

Constructors

Constructor	Description
DefaultAuthorizer()

Method Summary

Modifier and Type	Method	Description
boolean	authorize(Subject subject, Object secureMessage, SecurityMechanism securityMechanism, SecurityToken securityToken, ProviderConfig config, boolean isLiberty)	Authorizes the web services client.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthorizer

public DefaultAuthorizer()

Method Detail

authorize

public boolean authorize(Subject subject,
                         Object secureMessage,
                         SecurityMechanism securityMechanism,
                         SecurityToken securityToken,
                         ProviderConfig config,
                         boolean isLiberty)
                  throws SecurityException

Authorizes the web services client.

Specified by:

authorize in interface MessageAuthorizer

Parameters:

subject - authenticated subject.

secureMessage - the secure SOAPMessage. If the message security is provided by the WS-I profies, the secureMessage object is of type com.sun.identity.wss.security.handler.SecureSOAPMessage. If the message security is provided by the Liberty ID-WSF profiles, the secure message is of type com.sun.identity.liberty.ws.soapbinding.Message.

securityMechanism - the security mechanism that will be used to authenticate the web services client.

securityToken - the security token that is used.

config - the provider configuration.

isLiberty - boolean variable to indicate that the message security is provided by the liberty security profiles.

Throws:

SecurityException - if there is an exception during authorization.