| org.apache.jetspeed.security.spi.impl |
|
| Java Source File Name | Type | Comment |
| AbstractInternalPasswordCredentialInterceptorImpl.java | Class |
Base class providing default empty behavior for a
InternalPasswordCredentialInterceptor implementation. |
| AlgorithmUpgradePBEPasswordService.java | Class | |
| DefaultCredentialHandler.java | Class | |
| DefaultCredentialPasswordValidator.java | Class | |
| DefaultGroupSecurityHandler.java | Class | |
| DefaultPasswordCredentialImpl.java | Class |
Default Password credential implementation. |
| DefaultPasswordCredentialProvider.java | Class | |
| DefaultRoleSecurityHandler.java | Class | |
| DefaultSecurityMappingHandler.java | Class | |
| DefaultUserSecurityHandler.java | Class | |
| EncodePasswordOnFirstLoadInterceptor.java | Class | |
| InternalPasswordCredentialInterceptorsProxy.java | Class |
Provides a wrapper around a list of interceptors so multiple interceptors can
be used with the
DefaultCredentialHandler . |
| LdapCredentialHandler.java | Class | |
| LdapGroupSecurityHandler.java | Class | |
| LdapRoleSecurityHandler.java | Class | |
| LdapSecurityMappingHandler.java | Class | |
| LdapUserSecurityHandler.java | Class | |
| MaxPasswordAuthenticationFailuresInterceptor.java | Class |
Enforces a
MaxPasswordAuthenticationFailuresInterceptor.MaxPasswordAuthenticationFailuresInterceptor(int) maximum number of times a user may provide an invalid password. |
| MessageDigestCredentialPasswordEncoder.java | Class | |
| PasswordExpirationInterceptor.java | Class |
Enforces a maximum lifespan for a password credential.
When
PasswordExpirationInterceptor.afterAuthenticated(InternalUserPrincipal,String,InternalCredential,boolean) on authentication a password its expiration date is reached, its expired flag is set.
The
DefaultCredentialHandler then will fail the authentication and subsequent authentications
will fail immediately.
To ensure proper expiration handling, an empty (null) expiration date will be automatically
filled in when the credential is loaded from the persistent store using the
PasswordExpirationInterceptor.PasswordExpirationInterceptor(int) configured
max lifespan in days.
When a password credential is
PasswordExpirationInterceptor.beforeCreate(InternalUserPrincipal,Collection,String,InternalCredential,String) created or a password is
PasswordExpirationInterceptor.beforeSetPassword(InternalUserPrincipal,Collection,String,InternalCredential,String,boolean) updated a new future expiration date is calculated.
An existing or already provided higher expiration date will be preserved though. |
| PasswordHistoryInterceptor.java | Class |
Maintains a configurable FIFO stack of used password credentials for a principal.
It also requires a unique password (with regards to the values currently in the stack) when
a password is changed directly by the user itself.
The historical passwords are maintained as
InternalCredential instances with as
InternalCredential.getClassname classname value
PasswordHistoryInterceptor.HISTORICAL_PASSWORD_CREDENTIAL to distinguish them from the current password credential.
Implementation Note:
When a new password is about to be saved, a new copy of the current credential is saved as
a historic password credential. |
| PBEPasswordService.java | Class | |
| SecurityAccessImpl.java | Class |
Provides a utility class for common SPI queries. |
| SimpleCredentialPasswordValidator.java | Class | |
| ValidatePasswordOnLoadInterceptor.java | Class | |