| org.jboss.security.srp.SRPVerifierStore
All known Subclasses: org.jboss.security.srp.SerialObjectStore,
| SRPVerifierStore | | public interface SRPVerifierStore (Code) | | An interface describing the requirements of a password verifier store.
This is an abstraction that allows the information
needed by the server to be plugged in from various sources. E.g., LDAP
servers, databases, files, etc.
author:
Scott.Stark@jboss.org
version:
$Revision: 57210 $ |
| Inner Class :public static class VerifierInfo implements Serializable | |
| Method Summary | |
| public VerifierInfo | getUserVerifier(String username)
Get the indicated user's password verifier information. | | public void | setUserVerifier(String username, VerifierInfo info)
Set the indicated users' password verifier information. | | public void | verifyUserChallenge(String username, Object auxChallenge)
Verify an optional auxillary challenge sent from the client to the server. |
| setUserVerifier | | public void setUserVerifier(String username, VerifierInfo info) throws IOException(Code) | | Set the indicated users' password verifier information. This is equivalent
to changing a user's password and should generally invalidate any existing
SRP sessions and caches.
|
| verifyUserChallenge | | public void verifyUserChallenge(String username, Object auxChallenge) throws SecurityException(Code) | | Verify an optional auxillary challenge sent from the client to the server. The
auxChallenge object will have been decrypted if it was sent encrypted from the
client. An example of a auxillary challenge would be the validation of a hardware
token (SafeWord, SecureID, iButton) that the server validates to further strengthen
the SRP password exchange.
|
|
|