JAX-RS AutorizadorRequestFilter

AutorizadorRequestFilter.java

import java.io.IOException;

import javax.annotation.Priority;
import javax.ws.rs.Priorities;
import javax.ws.rs.container.ContainerRequestContext;
import javax.ws.rs.container.ContainerRequestFilter;
import javax.ws.rs.core.HttpHeaders;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.Response.Status;
import javax.ws.rs.ext.Provider;

@Priority(Priorities.AUTHORIZATION)
@Provider
public class AutorizadorRequestFilter implements ContainerRequestFilter {
	
	@Override
	public void filter(ContainerRequestContext req) throws IOException {
		String auth = req.getHeaderString(HttpHeaders.AUTHORIZATION);
		if (auth == null || "".equals(auth.trim())) {
			sendUnauthorizedResponse(req);
			return;
		}
		
		if (!isTokenDeAutorizacaoValido(auth)) {
			sendUnauthorizedResponse(req);
		}
	}

	private boolean isTokenDeAutorizacaoValido(String auth) {
		//Logica de validar o token de autorizacao aqui...
		
		return true;
	}
	
	private void sendUnauthorizedResponse(ContainerRequestContext req) {
		req.abortWith(Response.status(Status.UNAUTHORIZED).build());
	}

}