Revize 2c98eb7b

re #37 implemented AuthorizationService interface for non-static
access to Spring Security context.

server/src/main/java/org/danekja/ymanager/business/AuthorizationService.java

@@ +1 @@
+package org.danekja.ymanager.business;
+
+import org.danekja.ymanager.domain.User;
+
+/**
+ * Helper service which helps to get information regarding currently authenticated user and his permissions.
+ */
+public interface AuthorizationService {
+    /**
+     * @return currently signed-in user or null
+     */
+    User getCurrentUser();
+
+    /**
+     * @return true if there is a user associated with the current session
+     */
+    boolean isSignedIn();
+}

server/src/main/java/org/danekja/ymanager/business/impl/SpringAuthorizationService.java

@@ +1 @@
+package org.danekja.ymanager.business.impl;
+
+import org.danekja.ymanager.business.AuthorizationService;
+import org.danekja.ymanager.domain.User;
+import org.springframework.security.authentication.AnonymousAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+
+/**
+ * {@link AuthorizationService} implementation based on Spring Security framework.
+ */
+@Service
+public class SpringAuthorizationService implements AuthorizationService {
+
+    @Override
+    public User getCurrentUser() {
+        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
+        return !(auth instanceof AnonymousAuthenticationToken) ? (User) auth.getPrincipal() : null;
+    }
+
+    @Override
+    public boolean isSignedIn() {
+        return getCurrentUser() != null;
+    }
+
+}