TestAuth.java 文件源码

@Override
protected Application configure() {

    final AccountProvider provider = id -> {
        Account account = null;
        if ("a1".equals(id)) {
            account = Account.builder(id).credentials(Credentials.builder().secret("p1").build()).enabled(true)
                    .permission("R1").permission("R2").build();
        } else if ("a2".equals(id)) {
            account = Account.builder(id).credentials(Credentials.builder().secret("p2").build()).enabled(true)
                    .permission("R1").permission("R3").build();
        }
        return Optional.ofNullable(account);
    };

    final Realm realm = Realm.builder().resolver(AuthenticationToken.httpBasicResolver())
            .authenticator(Account.authenticator(provider)).withDefaultAuthorizer().build();

    return new ResourceConfig()// .register(AuthenticationFeature.class) // using auto-config
            .register(RolesAllowedDynamicFeature.class).register(new ContextResolver<Realm>() {

                @Override
                public Realm getContext(Class<?> type) {
                    return realm;
                }
            }).register(ProtectedResource.class).register(SemiProtectedResource.class)
            .register(PublicResource.class);
}