| org.jivesoftware.openfire.auth |
|
Authentication and Authorization service interfaces and classes. There are three compoents:
- Authentication. Authentication is the process of verifying a user. Custom authentication implementations can be created by extending the {@link org.jivesoftware.openfire.auth.AuthProvider} interface.
- Authorization. Authorization is the process of allowing an authenticated identity to choose a username. Default authorization will authorize an authenticated username to the same username only. Custom authorization implementations can be created by extending the {@link org.jivesoftware.openfire.auth.AuthorizationPolicy} interface.
- Authorization Mapping. Mapping occurs when the client did not request any specific username. This provides a method of giving a default username in these situations. Custom authorization mappings can be created by extending the {@link org.jivesoftware.openfire.auth.AuthorizationMapping} interface.
|
| Java Source File Name | Type | Comment |
| AuthFactory.java | Class | Pluggable authentication service. |
| AuthorizationManager.java | Class | Manages the AuthorizationProvider objects.
Overall description of the authentication and authorization process:
After a client connects, and idicates a desire to use SASL, the
SASLAuthentication object decides which SASL mechanisms to advertise,
and then performs the authentication. |
| AuthorizationMapping.java | Interface | This is the interface the used to provide default defualt authorization
ID's when none was selected by the client.
Users that wish to integrate with their own authorization
system must implement this interface.
Register the class with Openfire in the openfire.xml
file. |
| AuthorizationPolicy.java | Interface | This is the interface the AuthorizationManager uses to
conduct authorizations.
Users that wish to integrate with their own authorization
system must implement this interface, and are strongly
encouraged to extend either the AbstractAuthoriationPolicy
or the AbstractAuthorizationProvider classes which allow
the admin console manage the classes more effectively.
Register the class with Openfire in the openfire.xml
file. |
| AuthProvider.java | Interface | Provider interface for authentication. |
| AuthToken.java | Class | A token that proves that a user has successfully authenticated. |
| DefaultAuthorizationMapping.java | Class | This is the interface the used to provide default defualt authorization
ID's when none was selected by the client. |
| DefaultAuthorizationPolicy.java | Class | Different clients perform authentication differently, so this policy
will authorize any principal to a requested user that match specific
conditions that are considered secure defaults for most installations. |
| DefaultAuthProvider.java | Class | Default AuthProvider implementation. |
| HybridAuthProvider.java | Class | The hybrid auth provider allows up to three AuthProvider implementations to
be strung together to do chained authentication checking. |
| JDBCAuthProvider.java | Class | The JDBC auth provider allows you to authenticate users against any database
that you can connect to with JDBC. |
| NativeAuthProvider.java | Class | Authenticates using the native operating system authentication method. |
| POP3AuthProvider.java | Class | An AuthProvider that authenticates using a POP3 server. |
| UnauthenticatedException.java | Class | Thrown if a user does not have permission to access a particular method. |
| UnauthorizedException.java | Class | Thrown if a user does not have permission to access a particular method. |