OAuthPushMessagingFilter.java 文件源码

protected HttpServletRequest createSecurityContext(HttpServletRequest request, 
        OAuthConsumer consumer, OAuthToken accessToken) 
{
    final Principal principal = new SimplePrincipal(consumer.getKey());
    final Set<String> roles = getRoles(consumer);

    return new HttpServletRequestWrapper(request){
        @Override
        public Principal getUserPrincipal(){
            return principal;
        }
        @Override
        public boolean isUserInRole(String role){
            return roles.contains(role);
        }
        @Override
        public String getAuthType(){
            return OAUTH_AUTH_METHOD;
        }
    };
}