/*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
    * with the License.  You may obtain a copy of the License at
    *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied.  See the License for the
   * specific language governing permissions and limitations
   * under the License.
   */
  package org.apache.shiro.samples.jaxrs.resources;
  
  
  import org.apache.shiro.authz.annotation.RequiresAuthentication;
  import org.apache.shiro.authz.annotation.RequiresGuest;
  import org.apache.shiro.authz.annotation.RequiresPermissions;
  import org.apache.shiro.authz.annotation.RequiresRoles;
  import org.apache.shiro.authz.annotation.RequiresUser;
  
  import javax.ws.rs.DefaultValue;
  import javax.ws.rs.GET;
  import javax.ws.rs.Path;
  import javax.ws.rs.Produces;
  import javax.ws.rs.QueryParam;
  
  @Path("secure")
  @Produces({"application/json","plain/text"})
  public class SecureResource {
  
  
      @RequiresPermissions("lightsaber:requiresPermissions")
      @Path("RequiresPermissions")
      @GET
      public String protectedByRequiresPermissions() {
          return "protected";
      }
  
      @RequiresRoles("admin")
      @Path("RequiresRoles")
      @GET
      public String protectedByRequiresRoles() {
          return "protected";
      }
  
      @RequiresUser
      @Path("RequiresUser")
      @GET
      public String protectedByRequiresUser() {
          return "protected";
      }
  
      @RequiresGuest
      @Path("RequiresGuest")
      @GET
      public String protectedByRequiresGuest() {
          return "not protected";
      }
  
      @RequiresAuthentication
      @Path("RequiresAuthentication")
      @GET
      public String protectedByRequiresAuthentication() {
          return "protected";
      }
  
  
  }