| org.mmbase.security.AuthenticationData
All known Subclasses: org.mmbase.security.Authentication,
| AuthenticationData | | public interface AuthenticationData (Code) | | This interface represents information about the authentication implemtentation.
author:
Michiel Meeuwissen
version:
$Id: AuthenticationData.java,v 1.9 2007/06/18 09:01:14 michiel Exp $
since:
MMBase-1.8 |
| METHOD_ANONYMOUS | | final static int METHOD_ANONYMOUS(Code) | | Requests an 'anonymous' cloud, with a user with no credentials. This can only be used if the
security implementation provides the 'anonymous' authentication application.
|
| METHOD_ASIS | | final static int METHOD_ASIS(Code) | | Use the authenticated user which is stored in the session, or if no such user can be found,
try to supply 'anonymous'.
|
| METHOD_DEFAULT | | final static int METHOD_DEFAULT(Code) | | |
| METHOD_DELEGATE | | final static int METHOD_DELEGATE(Code) | | Delegates authentication completely to the authentication implementation. When using http, request and response
objects are added to the credentials (if the Parameters object returned by
AuthenticationData.createParameters can accept that) which can be used for user-interaction.
|
| METHOD_HTTP | | final static int METHOD_HTTP(Code) | | Use Http 'Basic' authentication. This only provides username / password and is not very safe,
because http basic authentication sends those unencrypted.
|
| METHOD_LOGINPAGE | | final static int METHOD_LOGINPAGE(Code) | | Use a dedicated 'login' jsp, to log in.
|
| METHOD_LOGOUT | | final static int METHOD_LOGOUT(Code) | | Remove the authenticated user from the session, and otherwise invalidate the user if
necessary (e.g. notify an authentication service).
|
| METHOD_PAGELOGON | | final static int METHOD_PAGELOGON(Code) | | Logon with given credentials (only Strings), and don't store this any where (except for the current 'page').
|
| METHOD_SESSIONDELEGATE | | final static int METHOD_SESSIONDELEGATE(Code) | | Delegates authentication comletely to the authentication implementation
AuthenticationData.METHOD_DELEGATE , but stores the authenticated in the session then. A second request with
this method will simply use the session.
|
| METHOD_SESSIONLOGON | | final static int METHOD_SESSIONLOGON(Code) | | Logon with given credentials (only Strings), and don't store this in the session.
|
| METHOD_UNSET | | final static int METHOD_UNSET(Code) | | |
| PARAMETER_USERNAME | | final static Parameter<String> PARAMETER_USERNAME(Code) | | Common parameters for logon-info.
|
| STRINGS | | final static String STRINGS(Code) | | Resourcebundle containing all kind of i18n versions of parameter names and so on. Used in
static block of
Authentication (because no static blocks allowed in interface).
|
| getDefaultMethod | | int getDefaultMethod(String protocol)(Code) | | The security implementation can override a default method. The default default method (as
implemented in
org.mmbase.security.Authentication for the 'http' protocol is HTTP
(which means that basic authentication of the http protocol can be used), but may not be
feasible for every implementation (it is e.g. useless if the security implementation does not have
name/password authentication).
Parameters:
protocol - For which protocol or null, which means 'for HTTP/1.1'. |
| getMethod | | int getMethod(String m)(Code) | | Several 'methods' to authenticate could be available. A method is a kind of protocol which
must be used to authenticate some body.
Not all authentication methods may be applicable for all communication protocols (like
http, https etc).
This method converts a user-friendly string describing the 'method' to a integer constant which can be used in
AuthenticationData.getTypes(int) .
Parameters:
m - A String like 'http', 'anonymous', 'loginpage', or 'delegatesession'. An integer contant. AuthenticationData.METHOD_DELEGATE, AuthenticationData.METHOD_PAGELOGON, AuthenticationData.METHOD_HTTP, AuthenticationData.METHOD_ASIS, AuthenticationData.METHOD_LOGOUT, AuthenticationData.METHOD_LOGINPAGEAuthenticationData.METHOD_SESSIONDELEGATE, AuthenticationData.METHOD_SESSIONLOGON. This method was introducedbefore java 1.5 (where the return type would more obviously be a AuthenticionMethodenumeration).
See Also: AuthenticationData.getDefaultMethod |
| isValid | | boolean isValid(UserContext userContext) throws SecurityException(Code) | | The method returns wether the UserContext has become invalid for some reason (change in security config?)
Parameters:
userContext - The UserContext of which we want to know the rights true when valid, otherwise false
exception:
SecurityException - When something strange happened |
|
|