01: /*
02: * Copyright 1999,2004 The Apache Software Foundation.
03: *
04: * Licensed under the Apache License, Version 2.0 (the "License");
05: * you may not use this file except in compliance with the License.
06: * You may obtain a copy of the License at
07: *
08: * http://www.apache.org/licenses/LICENSE-2.0
09: *
10: * Unless required by applicable law or agreed to in writing, software
11: * distributed under the License is distributed on an "AS IS" BASIS,
12: * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13: * See the License for the specific language governing permissions and
14: * limitations under the License.
15: */
16:
17: package org.apache.catalina.authenticator;
18:
19: import java.io.IOException;
20:
21: import org.apache.catalina.HttpRequest;
22: import org.apache.catalina.HttpResponse;
23: import org.apache.catalina.deploy.LoginConfig;
24:
25: /**
26: * An <b>Authenticator</b> and <b>Valve</b> implementation that checks
27: * only security constraints not involving user authentication.
28: *
29: * @author Craig R. McClanahan
30: * @version $Revision: 1.5 $ $Date: 2004/02/27 14:58:41 $
31: */
32:
33: public final class NonLoginAuthenticator extends AuthenticatorBase {
34:
35: // ----------------------------------------------------- Instance Variables
36:
37: /**
38: * Descriptive information about this implementation.
39: */
40: private static final String info = "org.apache.catalina.authenticator.NonLoginAuthenticator/1.0";
41:
42: // ------------------------------------------------------------- Properties
43:
44: /**
45: * Return descriptive information about this Valve implementation.
46: */
47: public String getInfo() {
48:
49: return (info);
50:
51: }
52:
53: // --------------------------------------------------------- Public Methods
54:
55: /**
56: * Authenticate the user making this request, based on the specified
57: * login configuration. Return <code>true</code> if any specified
58: * constraint has been satisfied, or <code>false</code> if we have
59: * created a response challenge already.
60: *
61: * @param request Request we are processing
62: * @param response Response we are creating
63: * @param config Login configuration describing how authentication
64: * should be performed
65: *
66: * @exception IOException if an input/output error occurs
67: */
68: public boolean authenticate(HttpRequest request,
69: HttpResponse response, LoginConfig config)
70: throws IOException {
71:
72: /* Associating this request's session with an SSO would allow
73: coordinated session invalidation, but should the session for
74: a webapp that the user didn't log into be invalidated when
75: another session is logged out?
76: String ssoId = (String) request.getNote(Constants.REQ_SSOID_NOTE);
77: if (ssoId != null)
78: associate(ssoId, getSession(request, true));
79: */
80:
81: if (debug >= 1)
82: log("User authentication is not required");
83: return (true);
84:
85: }
86:
87: }
|