OAuthDBFilter.java 文件源码

protected HttpServletRequest createSecurityContext(HttpServletRequest request, 
        org.jboss.resteasy.auth.oauth.OAuthConsumer consumer,
        OAuthToken accessToken) 
{
    // Alternatively we can have an alias associated with a given key
    // Example: www.messageing.service : kermit
    final Principal principal = new SimplePrincipal(consumer.getKey());
    final Set<String> roles = getProvider().convertPermissionsToRoles(accessToken.getPermissions());
    return new HttpServletRequestWrapper(request){
        @Override
        public Principal getUserPrincipal(){
            return principal;
        }
        @Override
        public boolean isUserInRole(String role){
            return roles.contains(role);
        }
        @Override
        public String getAuthType(){
            return OAUTH_AUTH_METHOD;
        }
    };
}