uk.ac.soton.ecs.grimoires.server.security.omii
Class AuthHandler

java.lang.Object
  org.apache.axis.handlers.BasicHandler
      uk.ac.soton.ecs.grimoires.server.security.omii.AuthHandler

All Implemented Interfaces:

org.apache.axis.Handler, Serializable

public class AuthHandler

extends org.apache.axis.handlers.BasicHandler

Authorization handler sits at the end of chain of handlers at the server side. It intercepts a verified signed SOAP message, extracts the requested operation and X509DN and then decides whether the operation is permitted on the basis of an XML-based access control list on file. It uses the auth parameter from grimoires.properties to located this access control list file. If operation is not permitted, an Axis fault with an appropriate message is thrown.

Author:

vt Created 9 September 2005

See Also:

Serialized Form

Field Summary

Fields inherited from class org.apache.axis.handlers.BasicHandler

makeLockable, name, options

Constructor Summary

AuthHandler()

Method Summary

void	invoke(org.apache.axis.MessageContext msgContext) invoke method automatically called in the handler chain when an incoming SOAP message occurs

Methods inherited from class org.apache.axis.handlers.BasicHandler

canHandleBlock, cleanup, generateWSDL, getDeploymentData, getName, getOption, getOptions, getUnderstoodHeaders, init, initHashtable, onFault, setName, setOption, setOptionDefault, setOptions, setOptionsLockable

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthHandler

public AuthHandler()

Method Detail

invoke

public void invoke(org.apache.axis.MessageContext msgContext)
            throws org.apache.axis.AxisFault

invoke method automatically called in the handler chain when an incoming SOAP message occurs

Throws:

org.apache.axis.AxisFault