mcollovati/quarkus-hilla

Provide quarkus-based implementation of `AccessPathChecker`

Opened this issue · 0 comments

AccessPathChecker allows NavigationAccessControl to check if a Flow view is protected by a security mechanism based on URLs.

An implementation for Quarkus should probably inspect AuthRuntimeConfig.permissions and apply rules defined in PolicyMappingConfig.

Another way could be to use the PathMatchingHttpSecurityPolicy bean exposed by quarkus-vertx-http, either by calling checkPermission on it or on the list of policy returned by findPermissionCheckers.
Both methods require a mock implementation of RoutingContext (could a JDK proxy be enough?)