Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

path: util/aop/aop-api/src/main/java/com/knubisoft/aop/api/impl/SecurityHttpRequestProcessingAspect.java

This aspect acts as a security check for each request. If an endpoint that was called is private, the aspect will begin authentication processing.
Firstly it checks if called method (endpoint) is secure by processing the @Operation swagger annotation. Each method within the API interfaces is annotated

...

by @Operation during the API layer generation. 

Example of

...

the secure

...

endpoint

...

:

Example of the public

...

endpoint

...

:

As you can see public endpoint doesn't have a security section at all (second example), this means that SecurityHttpRequestProcessingAspect won't do authentication and other security processes, just return the response to a client.

In the context of a private endpoint, the aspect will behave differently, when