org.apache.wicket.authentication
Class AuthenticatedWebApplication

java.lang.Object
  org.apache.wicket.Application
      org.apache.wicket.protocol.http.WebApplication
          org.apache.wicket.authentication.AuthenticatedWebApplication

All Implemented Interfaces:

IUnauthorizedComponentInstantiationListener, IRoleCheckingStrategy, IEventSink, ISessionStore.UnboundListener

public abstract class AuthenticatedWebApplication
extends WebApplication
implements IRoleCheckingStrategy, IUnauthorizedComponentInstantiationListener

A web application subclass that does role-based authentication.

Author:

Jonathan Locke

Field Summary

Fields inherited from class org.apache.wicket.Application

CONFIGURATION, CONTEXTPATH, DEPLOYMENT, DEVELOPMENT

Constructor Summary

AuthenticatedWebApplication()
Constructor

Method Summary

protected abstract java.lang.Class<? extends WebPage>	getSignInPageClass()
protected abstract java.lang.Class<? extends AuthenticatedWebSession>	getWebSessionClass()
boolean	hasAnyRole(Roles roles) Whether any of the given roles matches.
protected void	init()
Session	newSession(Request request, Response response)
void	onUnauthorizedInstantiation(Component component)
protected void	onUnauthorizedPage(Page page) Called when an AUTHENTICATED user tries to navigate to a page that they are not authorized to access.

Methods inherited from class org.apache.wicket.protocol.http.WebApplication

addIgnoreMountPath, get, getAndRemoveBufferedResponse, getApplicationKey, getConfigurationType, getInitParameter, getMimeType, getResourceFinder, getServletContext, getSessionAttributePrefix, getWicketFilter, hasBufferedResponse, internalDestroy, internalInit, logEventTarget, logResponseTarget, mount, mountBookmarkablePage, mountSharedResource, newAjaxRequestTarget, newWebRequest, newWebResponse, outputDevelopmentModeWarning, sessionUnbound, set, setServletContext, setWicketFilter, storeBufferedResponse

Methods inherited from class org.apache.wicket.Application

addComponentInstantiationListener, addComponentOnAfterRenderListener, addPostComponentOnBeforeRenderListener, addPreComponentOnBeforeRenderListener, configure, createRequestCycle, exists, fetchCreateAndSetSession, get, getApplicationKeys, getApplicationSettings, getConverterLocator, getDebugSettings, getEncoderContext, getExceptionSettings, getFrameworkSettings, getHomePage, getMarkupSettings, getMetaData, getName, getPageFactory, getPageManager, getPageManagerContext, getPageManagerProvider, getPageRendererProvider, getPageSettings, getRequestCycleProvider, getRequestCycleSettings, getRequestLogger, getRequestLoggerSettings, getResourceReferenceRegistry, getResourceSettings, getRootRequestMapper, getRootRequestMapperAsCompound, getSecuritySettings, getSessionSettings, getSessionStore, getSessionStoreProvider, getSharedResources, initApplication, initializeComponents, newConverterLocator, newExceptionMapper, newPageFactory, newRequestLogger, newResourceReferenceRegistry, newSharedResources, onDestroy, onEvent, removeComponentInstantiationListener, removeComponentOnAfterRenderListener, removePostComponentOnBeforeRenderListener, removePreComponentOnBeforeRenderListener, setMetaData, setName, setPageManagerProvider, setPageRendererProvider, setRequestCycleProvider, setRootRequestMapper, setSessionStoreProvider, validateInit

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthenticatedWebApplication

public AuthenticatedWebApplication()

Constructor

Method Detail

init

protected void init()

Overrides:

init in class WebApplication

See Also:

WebApplication.init()

hasAnyRole

public final boolean hasAnyRole(Roles roles)

Description copied from interface: IRoleCheckingStrategy

Whether any of the given roles matches. For example, if a user has role USER and the provided roles are {USER, ADMIN} this method should return true as the user has at least one of the roles that were provided.

Specified by:

hasAnyRole in interface IRoleCheckingStrategy

Parameters:

roles - the roles

Returns:

true if a user or whatever subject this implementation wants to work with has at least on of the provided roles

See Also:

IRoleCheckingStrategy.hasAnyRole(Roles)

onUnauthorizedInstantiation

public final void onUnauthorizedInstantiation(Component component)

Specified by:

onUnauthorizedInstantiation in interface IUnauthorizedComponentInstantiationListener

See Also:

IUnauthorizedComponentInstantiationListener.onUnauthorizedInstantiation(Component)

newSession

public Session newSession(Request request,
                          Response response)

Overrides:

newSession in class WebApplication

See Also:

WebApplication.newSession(org.apache.wicket.request.Request, org.apache.wicket.request.Response)

getWebSessionClass

protected abstract java.lang.Class<? extends AuthenticatedWebSession> getWebSessionClass()

Returns:

AuthenticatedWebSession subclass to use in this authenticated web application.

getSignInPageClass

protected abstract java.lang.Class<? extends WebPage> getSignInPageClass()

Returns:

Subclass of sign-in page

onUnauthorizedPage

protected void onUnauthorizedPage(Page page)

Called when an AUTHENTICATED user tries to navigate to a page that they are not authorized to access. You might want to override this to navigate to some explanatory page or to the application's home page.

Parameters:

page - The page