Question

I have a REST api written with JAX-RS, and I need to add authentication to it. So far all the information I’ve been able to find about it has suggestions for doing it via spring, which I’m not using. Is there something already existing, or would it be easy to write, something that will let me annotate either a method, or the entire class which would force auth headers to be present?

I’m using tomcat6 and jersey, if that matters.

Something like:

@Path("api")
public class Api {
    @GET
    @AuthenticationRequired
    public Response getInfo(...) {...}
}

Answer 1

I think you want import javax.annotation.Security.RolesAllowed;

The annotation itself looks like this

@Path("/helloworld")
@RolesAllowed({"ADMIN", "ORG1"})
public class helloWorld {

@GET
@Path("sayHello")  
@Produces("text/plain")
@RolesAllowed("ADMIN")
public String sayHello() {
   return "Hello World!";
}
}