Uses of Class
io.helidon.webserver.security.SecurityHandler
Packages that use SecurityHandler
-
Uses of SecurityHandler in io.helidon.webserver.security
Methods in io.helidon.webserver.security that return SecurityHandlerModifier and TypeMethodDescriptionstatic SecurityHandler
SecurityFeature.allowAnonymous()
If called, authentication failure will not abort request and will continue as anonymous (defaults to false).static SecurityHandler
SecurityFeature.audit()
Whether to audit this request - defaults to false for GET and HEAD methods, true otherwise.SecurityHandler.audit()
Audit this request for any method.SecurityHandler.auditEventType
(String eventType) Override for event-type, defaults to "request".SecurityHandler.auditMessageFormat
(String messageFormat) Override for audit message format, defaults to "%3$s %1$s \"%2$s\" %5$s %6$s requested by %4$s".static SecurityHandler
SecurityFeature.authenticate()
If called, request will go through authentication process - defaults to false (even if authorize is true).SecurityHandler.authenticate()
If called, request will go through authentication process - (authentication is disabled by default - it may be enabled as a side effect of other methods, such asrolesAllowed(String...)
.SecurityHandler.authenticationOptional()
If called, authentication failure will not abort request and will continue as anonymous (authentication is not optional by default).static SecurityHandler
SecurityFeature.authenticator
(String explicitAuthenticator) Use a named authenticator (as supported by security - if not defined, default authenticator is used).SecurityHandler.authenticator
(String explicitAuthenticator) Use a named authenticator (as supported by security - if not defined, default authenticator is used).static SecurityHandler
SecurityFeature.authorize()
Enable authorization for this route.SecurityHandler.authorize()
If called, request will go through authorization process - (authorization is disabled by default - it may be enabled as a side effect of other methods, such asrolesAllowed(String...)
.static SecurityHandler
SecurityFeature.authorizer
(String explicitAuthorizer) Use a named authorizer (as supported by security - if not defined, default authorizer is used, if none defined, all is permitted).SecurityHandler.authorizer
(String explicitAuthorizer) Use a named authorizer (as supported by security - if not defined, default authorizer is used, if none defined, all is permitted).SecurityHandlerConfig.Builder.build()
SecurityHandlerConfig.BuilderBase.SecurityHandlerConfigImpl.build()
static SecurityHandler
SecurityHandler.create
(Config config, SecurityHandler defaults) Create an instance from configuration.static SecurityHandler
SecurityHandler.create
(Consumer<SecurityHandlerConfig.Builder> consumer) Create a new instance, customizing its configuration.SecurityHandler.customObject
(Object object) Register a custom object for security request(s).SecurityFeatureConfig.BuilderBase.defaults()
The default security handler.SecurityFeatureConfig.BuilderBase.SecurityFeatureConfigImpl.defaults()
static SecurityHandler
SecurityFeature.enforce()
Return a default instance to create a default enforcement point (or modify the result further).SecurityHandlerConfig.BuilderBase.SecurityHandlerConfigImpl.get()
PathsConfig.BuilderBase.PathsConfigImpl.handler()
SecurityHandler.queryParam
(String queryParamName, TokenHandler headerHandler) Add a query parameter extraction configuration.static SecurityHandler
SecurityFeature.rolesAllowed
(String... roles) An array of allowed roles for this path - must have a security provider supporting roles.SecurityHandler.rolesAllowed
(String... roles) An array of allowed roles for this path - must have a security provider supporting roles (either authentication or authorization provider).static SecurityHandler
SecurityFeature.secure()
Secure access using authentication and authorization.SecurityHandler.skipAudit()
Disable auditing of this request.SecurityHandler.skipAuthentication()
If called, request will NOT go through authentication process.SecurityHandler.skipAuthorization()
Skip authorization for this route.Methods in io.helidon.webserver.security that return types with arguments of type SecurityHandlerMethods in io.helidon.webserver.security with parameters of type SecurityHandlerModifier and TypeMethodDescriptionstatic SecurityHandler
SecurityHandler.create
(Config config, SecurityHandler defaults) Create an instance from configuration.SecurityFeatureConfig.BuilderBase.defaults
(SecurityHandler defaults) The default security handler.PathsConfig.BuilderBase.handler
(SecurityHandler handler) SecurityHttpFeature.securityDefaults
(SecurityHandler defaultHandler) Create a new web security instance using the default handler as base defaults for all handlers used.Method parameters in io.helidon.webserver.security with type arguments of type SecurityHandlerModifier and TypeMethodDescriptionSecurityFeatureConfig.BuilderBase.defaults
(Supplier<? extends SecurityHandler> supplier) The default security handler.PathsConfig.BuilderBase.handler
(Supplier<? extends SecurityHandler> supplier)