Create Guice Injector using a Security Builder

guice-injector-with-security.java

  @Override
  protected Injector getInjector() {
    return PancakesGuiceInjector.builder()
        .addModule(new SuccessCenterApiModule())

        .addModule(new LocalSuccessCenterApiModule(), DeploymentEnvironment.DEV)
        .addModule(new GoogleCloudSuccessCenterApiModule(), DeploymentEnvironment.excludingEnvironments(DeploymentEnvironment.DEV))

        .addModule(new SuccessCenterPolicyServletModule())

        .addModule(
            PancakesSecurity.module()
                .anonymous()
                    .path("/public", "/public/**", "/**/public/**")
                    .path("/info", "/info/**")
                    .and()
                .domain()
                    .accountId("OAuth Account Id from Google Console")
                    .secret("OAutch Account secret from Google Console")
                    .and()
                .infusionsoftId()
                .neverEverInMillionsOfYears(ross)
                .forgetIt(ross)
                .build(servletContext)
        )
        .build();
  }

backToTheDrawingBoard

we don't like the .and() after .infusionsoftId()

ps... anon should die because abbreviations are evil and we talked about .anonymous().path(...)

where does the servletContext come from in .build(servletContext) ?

servletContext is not needed in .build() you should use .getServletContext() in the AppSecurityModule.

getInjector() is in the class that extends GuiceServletContextListener, so I'm getting it from public void contextInitialized(). However, Ross points out that I shouldn't need it here - the PancakesServletModule should install() the WebModule that extends ShiroWebModule.

I bet I'll get a bit further and find that he's right. And all will be better with the world. Worse case, it isn't too horrible as-is (but I do think we can do better).

also i think

.neverEverInMillionsOfYears(ross)
.forgetIt(ross)

is superfluous