in support/spring/src/main/java/org/apache/shiro/spring/remoting/SecureRemoteInvocationExecutor.java [78:123]
public Object invoke(final RemoteInvocation invocation, final Object targetObject)
throws NoSuchMethodException, IllegalAccessException, InvocationTargetException {
try {
SecurityManager securityManager =
this.securityManager != null ? this.securityManager : SecurityUtils.getSecurityManager();
Subject.Builder builder = new Subject.Builder(securityManager);
String host = (String) invocation.getAttribute(SecureRemoteInvocationFactory.HOST_KEY);
if (host != null) {
builder.host(host);
}
Serializable sessionId = invocation.getAttribute(SecureRemoteInvocationFactory.SESSION_ID_KEY);
if (sessionId != null) {
builder.sessionId(sessionId);
} else {
if (LOGGER.isTraceEnabled()) {
LOGGER.trace("RemoteInvocation did not contain a Shiro Session id attribute under "
+ "key [" + SecureRemoteInvocationFactory.SESSION_ID_KEY + "]. A Subject based "
+ "on an existing Session will not be available during the method invocation.");
}
}
Subject subject = builder.buildSubject();
return subject.execute(new Callable() {
public Object call() throws Exception {
return SecureRemoteInvocationExecutor.super.invoke(invocation, targetObject);
}
});
} catch (ExecutionException e) {
Throwable cause = e.getCause();
if (cause instanceof NoSuchMethodException) {
throw (NoSuchMethodException) cause;
} else if (cause instanceof IllegalAccessException) {
throw (IllegalAccessException) cause;
} else if (cause instanceof InvocationTargetException) {
throw (InvocationTargetException) cause;
} else {
throw new InvocationTargetException(cause);
}
} catch (Throwable t) {
throw new InvocationTargetException(t);
}
}