java - Spring endpoint take session id and HEATEOS -


i working spring controller , adding authorization , authentication it. spring controller uses hateoas , supposed add service verifies session id inside request header.

using spring security seems not fitting since asking outside service authentication , authorization based on resources. authorization of resources happens on metadata inside database.

i looking simple , best practice way that.

i have following spring controller endpoint:

@apioperation(value = "gets bucket's metadata id")     @apiresponses(value = { @apiresponse(code = 404, message = "bucket not found"),                             @apiresponse(code = 401, message = "user not authenticated"),                             @apiresponse(code = 403, message = "permission denied"), })     @requestmapping(value = "/{bucketid}", method = get)     public bucketmetadata getmetadata(             @apiparam(value = "sessionid", required = true) @requestheader(value = "sessionid", required = true) string sessionid,             @pathvariable long bucketid) throws notauthenticatedexception, accessdeniedexception {         restapiaccessservice.checkaccessbysessionidandthrowifdeclined(sessionid, bucketid);         return bucketservice.getbucketmetadata(bucketid);     }

the service relies on microservice validates sessionid, , authorization service validates access bucketid.

1) have not seen spring examples use session id inside controller. can improve design?

the reason why questioning session id in endpoint because hateos linkto accessing controller needs session id.

linkto(methodon(catalogobjectcontroller.class).getraw(sessionid,bucketid,urlencoder.encode(name,"utf-8")));

the above code doesn't right , forces me handle not authenticated , not authorized exceptions.

i happy type of examples or input me create clean, simple, short , maintainable solution.

thank you, tobias


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more