| /* |
| * Copyright 2010 Google Inc. |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); you may not |
| * use this file except in compliance with the License. You may obtain a copy of |
| * the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the |
| * License for the specific language governing permissions and limitations under |
| * the License. |
| */ |
| package com.google.gwt.requestfactory.server; |
| |
| import com.google.gwt.requestfactory.shared.Service; |
| |
| /** |
| * <p> |
| * <span style="color:red">Experimental API: This class is still under rapid |
| * development, and is very likely to be deleted. Use it at your own risk. |
| * </span> |
| * </p> |
| * A security provider that enforces {@link com.google.gwt.requestfactory.shared.Service} |
| * annotations. |
| */ |
| public class DefaultSecurityProvider implements RequestSecurityProvider { |
| |
| public void checkClass(Class<?> clazz) throws SecurityException { |
| Service service = clazz.getAnnotation(Service.class); |
| if (service == null) { |
| throw new SecurityException( |
| "Class " + clazz.getName() + " does not have a @Service annotation."); |
| } |
| try { |
| Class.forName(service.value().getCanonicalName()); |
| } catch (ClassNotFoundException e) { |
| throw new SecurityException( |
| "Class " + service.value() + " from @Service annotation on " + clazz |
| + " cannot be loaded."); |
| } |
| } |
| |
| public String encodeClassType(Class<?> type) { |
| return type.getName(); |
| } |
| |
| public String mapOperation(String operationName) throws SecurityException { |
| return operationName; |
| } |
| } |