Examples with SecurityHole org.candlepin.common.auth.SecurityHole used on opensource projects

Example 11 with SecurityHole

use of org.candlepin.common.auth.SecurityHole in project candlepin by candlepin.

the class StatusResource method status.

/**
 * Retrieves the Status of the System
 * <p>
 * <pre>
 * {
 *   "result" : true,
 *   "version" : "0.9.10",
 *   "rulesVersion" : "5.8",
 *   "release" : "1",
 *   "standalone" : true,
 *   "timeUTC" : [date],
 *   "managerCapabilities" : [ "cores", "ram", "instance_multiplier" ],
 *   "rulesSource" : "DEFAULT"
 * }
 * </pre>
 * <p>
 * Status to see if a server is up and running
 *
 * @return a Status object
 * @httpcode 200
 */
@GET
@ApiOperation(value = "Status", notes = "Returns status of the server", authorizations = {})
@Produces({ MediaType.APPLICATION_JSON })
@SecurityHole(noAuth = true, anon = true)
public Status status() {
    StatusCache statusCache = candlepinCache.getStatusCache();
    Status cached = statusCache.getStatus();
    if (cached != null) {
        return cached;
    }
    /*
         * Originally this was used to indicate database connectivity being good/bad.
         * In reality it could never be false, the request would fail. This check has
         * been moved to GET /status/db.
         */
    boolean good = true;
    try {
        rulesCurator.getUpdatedFromDB();
    } catch (Exception e) {
        log.error("Error checking database connection", e);
        good = false;
    }
    CandlepinModeChange modeChange = modeManager.getLastCandlepinModeChange();
    if (modeChange.getMode() != Mode.NORMAL) {
        good = false;
    }
    Status status = new Status(good, version, release, standalone, jsProvider.getRulesVersion(), jsProvider.getRulesSource(), modeChange.getMode(), modeChange.getReason(), modeChange.getChangeTime());
    statusCache.setStatus(status);
    return status;
}

Example 12 with SecurityHole

use of org.candlepin.common.auth.SecurityHole in project candlepin by candlepin.

the class AuthorizationFeature method configure.

@Override
public void configure(ResourceInfo resourceInfo, FeatureContext context) {
    Method method = resourceInfo.getResourceMethod();
    SecurityHole securityHole = method.getAnnotation(SecurityHole.class);
    String name = method.getDeclaringClass().getName() + "." + method.getName();
    if (securityHole != null) {
        log.debug("Not registering authorization filter on {}", name);
        context.register(securityHoleFilter);
    } else if (resourceInfo.getResourceClass().equals(ApiListingResource.class)) {
        log.debug("Not registering authorization filter for Swagger: {}", name);
        context.register(securityHoleFilter);
    } else if (isSuperAdminOnly(method)) {
        log.debug("Registering superadmin only on {}", name);
        context.register(superAdminFilter);
    } else {
        log.debug("Registering standard authorization on {}", name);
        context.register(authorizationFilter);
    }
}