| org.objectweb.jonas.security.realm.web.catalina55.JACC
JACC | public class JACC extends RealmBase implements Cloneable(Code) | |
Implementation of a Realm. (by a wrapper) Use any JOnAS realm by specifying
the resource name This implementation manages the security with JACC
specification It implements Cloneable to allow clones. Each context must have
its own Realm. A realm can not be shared across different contexts or an
engine. This is because each realm is associated to a permission manager
Extends the Realmbase class of the Tomcat Server.
author: Florent Benoit |
Method Summary | |
public Principal | authenticate(String username, String credentials) Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null . | public Principal | authenticate(X509Certificate[] cert) Return the Principal associated with the specified chain of X509 client
certificates. | public Principal | authenticateJAAS(String username, String credentials) Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null . | public Principal | authenticateResource(String username, String credentials) Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null . | public Object | clone() Creates and returns a copy of this object. | public SecurityConstraint[] | findSecurityConstraints(Request request, Context context) Return the SecurityConstraints configured to guard the request URI for
this request, or null if there is no such constraint. | public String | getInfo() Return descriptive information about this Realm implementation and the
corresponding version number, in the format
<description>/<version> . | protected String | getName() Return a short name for this Realm implementation. | protected String | getPassword(String username) Return the password associated with the given principal's user name.
Parameters: username - the given principal's user name. | public PermissionManager | getPermissionManager() | protected Principal | getPrincipal(String username) Return the Principal associated with the given user name.
Parameters: username - the given principal's user name. | public String | getResourceName() Return the resource name we will be using. | public boolean | hasResourcePermission(Request request, Response response, SecurityConstraint[] constraints, Context context) Perform access control based on the specified authorization constraint. | public boolean | hasRole(Principal principal, String role) true if the specified Principal has the specifiedsecurity role, within the context of this Realm; otherwise returnfalse . | public boolean | hasUserDataPermission(Request request, Response response, SecurityConstraint[] constraints) Enforce any user data constraint required by the security constraint
guarding this request URI. | protected void | log(String message) | public void | setContext(Context context) Set the context of this Realm. | public void | setPermissionManager(PermissionManager permissionManager) | public void | setResourceName(String resourceName) Set the resource name we will be using. | public synchronized void | start() Prepare for active use of the public methods of this Component. | public synchronized void | stop() Gracefully shut down active use of the public methods of this Component. |
authenticate | public Principal authenticate(String username, String credentials)(Code) | | Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null .
Parameters: username - Username of the Principal to look up Parameters: credentials - Password or other credentials to use in authenticatingthis username the principal associated |
authenticate | public Principal authenticate(X509Certificate[] cert)(Code) | | Return the Principal associated with the specified chain of X509 client
certificates. If there is none, return null .
Parameters: cert - Array of client certificates, with the first one in the arraybeing the certificate of the client itself. the associated Principal |
authenticateJAAS | public Principal authenticateJAAS(String username, String credentials)(Code) | | Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null .
Parameters: username - Username of the Principal to look up Parameters: credentials - Password or other credentials to use inauthenticating this username the principal associated |
authenticateResource | public Principal authenticateResource(String username, String credentials)(Code) | | Return the Principal associated with the specified username and
credentials, if there is one; otherwise return null .
Parameters: username - Username of the Principal to look up Parameters: credentials - Password or other credentials to use in authenticatingthis username the principal associated |
findSecurityConstraints | public SecurityConstraint[] findSecurityConstraints(Request request, Context context)(Code) | | Return the SecurityConstraints configured to guard the request URI for
this request, or null if there is no such constraint.
Parameters: request - Request we are processing Parameters: context - Context the Request is mapped to security constraints configured to guard the request URI |
getInfo | public String getInfo()(Code) | | Return descriptive information about this Realm implementation and the
corresponding version number, in the format
<description>/<version> .
the info. |
getName | protected String getName()(Code) | | Return a short name for this Realm implementation.
the name |
getPassword | protected String getPassword(String username)(Code) | | Return the password associated with the given principal's user name.
Parameters: username - the given principal's user name. the password associated. |
getPermissionManager | public PermissionManager getPermissionManager()(Code) | | the permission manager used by this realm. |
getPrincipal | protected Principal getPrincipal(String username)(Code) | | Return the Principal associated with the given user name.
Parameters: username - the given principal's user name. the Principal associated |
getResourceName | public String getResourceName()(Code) | | Return the resource name we will be using.
the resource name. |
hasResourcePermission | public boolean hasResourcePermission(Request request, Response response, SecurityConstraint[] constraints, Context context) throws IOException(Code) | | Perform access control based on the specified authorization constraint.
true if this constraint is satisfied andprocessing should continue, or false otherwise. Parameters: request - Request we are processing Parameters: response - Response we are creating Parameters: constraints - Security constraint we are enforcing Parameters: context - The Context to which client of this class is attached. exception: IOException - if an input/output error occurs |
hasRole | public boolean hasRole(Principal principal, String role)(Code) | | true if the specified Principal has the specifiedsecurity role, within the context of this Realm; otherwise returnfalse . This method can be overridden by Realmimplementations, but the default is adequate when an instance ofGenericPrincipal is used to representauthenticated Principals from this Realm. Parameters: principal - Principal for whom the role is to be checked Parameters: role - Security role to be checked |
hasUserDataPermission | public boolean hasUserDataPermission(Request request, Response response, SecurityConstraint[] constraints) throws IOException(Code) | | Enforce any user data constraint required by the security constraint
guarding this request URI.
true if this constraint was not violated andprocessing should continue, or false if we havecreated a response already. Parameters: request - Request we are processing Parameters: response - Response we are creating Parameters: constraints - Security constraints being checked exception: IOException - if an input/output error occurs |
log | protected void log(String message)(Code) | | Log a message on the Logger associated with our Container (if any)
Parameters: message - Message to be logged |
setContext | public void setContext(Context context)(Code) | | Set the context of this Realm. This is used to retrieve xml information
of the web.xml file
Parameters: context - Context for this realm |
setPermissionManager | public void setPermissionManager(PermissionManager permissionManager)(Code) | | Set the permission manager used by this realm
Parameters: permissionManager - the permission manager to use |
setResourceName | public void setResourceName(String resourceName)(Code) | | Set the resource name we will be using.
Parameters: resourceName - The new resource name |
start | public synchronized void start() throws LifecycleException(Code) | | Prepare for active use of the public methods of this Component.
exception: LifecycleException - if this component detects a fatal errorthat prevents it from being started |
stop | public synchronized void stop() throws LifecycleException(Code) | | Gracefully shut down active use of the public methods of this Component.
exception: LifecycleException - if this component detects a fatal errorthat needs to be reported |
|
|