| com.sun.jbi.binding.security.HttpSecurityHandler
All known Subclasses: com.sun.jbi.internal.security.HttpSecurityHandler, com.sun.jbi.internal.security.https.HttpSecurityHandler,
| HttpSecurityHandler | | public interface HttpSecurityHandler (Code) | | HttpsSecurityHandler defines a set of methods which can be used by a Http binding.
author:
Sun Microsystems, Inc. |
| authenticateSenderRequest | | Subject authenticateSenderRequest(HttpServletRequest request, Endpoint endpoint, Subject subject) throws HttpErrorResponseException(Code) | | Authenticate a HttpServletRequest.
If the Endpoint requires SSL Client Authentication, this method gets the Client
Certificate from the request and authenticates the Sender. If a Client Certificate
is missing an exception is thrown.
If the Endpoint does not require SSL Client Authentication none of the above steps
are performed and an empty Subject is returned. This method does not return a null
Subject to avoid NullPOinterExceptions.
Parameters:
request - is the HttpServletRequest.
Parameters:
endpoint - is the targeted Endpoint
Parameters:
subject - is the Sender Subject to be updated, if null a new one is created.
throws:
HttpErrorResponseException - when the processing results in a Http Error the authenticated Subjectresponse to be sent to the client. |
| authenticateSenderRequest | | Subject authenticateSenderRequest(X509Certificate cert, Endpoint endpoint, Subject subject) throws HttpErrorResponseException(Code) | | Authenticate the Sender Request by getting the Sender identity from the
Certificate.
Parameters:
cert - is the trusted X.509 Certificate.
Parameters:
endpoint - is the targeted Endpoint
Parameters:
subject - is the Sender Subject to be updated, if null a new one is created.
throws:
HttpErrorResponseException - when the processing results in a Http Errorresponse to be sent to the client. the authenticated Subject |
|
|