org.hawkular.inventory.rest.security

Class SecurityIntegration

java.lang.Object

org.hawkular.inventory.rest.security.SecurityIntegration

@ApplicationScoped
public class SecurityIntegration
extends Object

Integrates the security concerns with the inventory.

Mutation operations must be checked explicitly in the REST classes using the Security bean and invoking one of its can*() methods. The creation of the security resources associated with the newly created inventory entities is handled automagically by this class which does that by observing the mutation events on the inventory .

To completely disable the auth completely do following:

• Use the AllPermissive annotation in RestBase class (it's commented there).
• Set the DUMMY flag to true in SecurityIntegration class.
• Comment out the secure-deployment element for hawkular-inventory-dist.war in dist/src/main/resources/wildfly/patches/standalone.xsl in hawkular/hawkular repo.
• Comment out the keycloak xml elements in jboss-web.xml and web.xml (it's commented there).

NOTE1: it can be disabled also only partially, for instance if the AllPermissive annotation is used only above the RestBase.tenantIdProducer field the auth will be working but the tenant will be always the same.

NOTE2: This may be useful to measure the impact of security aspects to the overall performance.

Since:

0.0.2

Author:

Lukas Krejci

Constructor Summary

Constructors

Constructor and Description
SecurityIntegration()

Method Summary

Modifier and Type	Method and Description
static boolean	isDummy()
void	react(AbstractElement<?,?> entity, Action<?,?> action)
void	start(InventoryInitialized event)
void	stop(DisposingInventory event)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityIntegration

public SecurityIntegration()

Method Detail

start

public void start(@Observes
                  InventoryInitialized event)

stop

public void stop(@Observes
                 DisposingInventory event)

react

public void react(AbstractElement<?,?> entity,
                  Action<?,?> action)

isDummy

public static boolean isDummy()