Script to identify classes defining JavaEE JWS web accessible methods without an authorization annotation on them.

find-javaee-jws-methods-without-authz.sh

#!/bin/bash
echo "Folder:"
pwd
for line in $(grep -rFc "@WebMethod" * | grep -v ":0")
do
	services_count=$(echo $line | cut -d':' -f2)
	java_class_file=$(echo $line | cut -d':' -f1)
	auth_annot_count=$(grep -rFc "@RolesAllowed" $java_class_file)
	if [ "$services_count" != "$auth_annot_count" ]
	then
		echo $line
	fi
done