public class WebJASPIAuthenticator
extends org.apache.catalina.authenticator.AuthenticatorBase
Tomcat authenticator that does JSR-196 (JASPI) authentication.
Modifier and Type | Field and Description |
---|---|
protected String |
messageLayer |
protected boolean |
secureResponse |
protected String |
serverAuthenticationManagerClass |
AUTH_HEADER_NAME, cache, changeSessionIdOnAuthentication, context, disableProxyCaching, info, lifecycle, REALM_NAME, securePagesWithPragma, SESSION_ID_BYTES, sm, sso, started
Constructor and Description |
---|
WebJASPIAuthenticator() |
Modifier and Type | Method and Description |
---|---|
protected boolean |
authenticate(org.apache.catalina.connector.Request request,
javax.servlet.http.HttpServletResponse response,
org.apache.catalina.deploy.LoginConfig config) |
protected Principal |
buildJBossPrincipal(Subject subject,
Principal principal) |
boolean |
getSecureResponse()
Obtains the value of the flag that indicates whether JASPI should be used to secure the HTTP response or not.
|
protected org.jboss.security.ServerAuthenticationManager |
getServerAuthenticationManager()
Instantiates and returns the
ServerAuthenticationManager implementation. |
String |
getServerAuthenticationManagerClass()
Obtains the fully-qualified name of the class that implements the
ServerAuthenticationManager interface. |
protected void |
register(org.apache.catalina.connector.Request request,
javax.servlet.http.HttpServletResponse response,
Principal principal,
String authType,
String username,
String password)
Registers an authenticated Principal and authentication type in our request, in the current session (if there is one),
and with our SingleSignOn valve, if there is one.
|
void |
setSecureResponse(boolean secureResponse)
Sets the flag that indicates whether JASPI should be used to secure the HTTP response or not.
|
void |
setServerAuthenticationManagerClass(String serverAuthenticationManagerClass)
Sets the fully-qualified name of the class that implements the
ServerAuthenticationManager interface. |
addLifecycleListener, associate, authenticate, findLifecycleListeners, generateSessionId, getCache, getContainer, getDisableProxyCaching, getInfo, getSecurePagesWithPragma, invoke, isChangeSessionIdOnAuthentication, login, logout, reauthenticateFromSSO, removeLifecycleListener, setCache, setChangeSessionIdOnAuthentication, setContainer, setDisableProxyCaching, setSecurePagesWithPragma, start, stop, unregister
protected final String messageLayer
protected String serverAuthenticationManagerClass
protected boolean secureResponse
protected boolean authenticate(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response, org.apache.catalina.deploy.LoginConfig config) throws IOException
authenticate
in class org.apache.catalina.authenticator.AuthenticatorBase
IOException
public String getServerAuthenticationManagerClass()
Obtains the fully-qualified name of the class that implements the ServerAuthenticationManager
interface.
ServerAuthenticationManager
implementation class.public void setServerAuthenticationManagerClass(String serverAuthenticationManagerClass)
Sets the fully-qualified name of the class that implements the ServerAuthenticationManager
interface.
serverAuthenticationManagerClass
- the name ServerAuthenticationManager
implementation class.public boolean getSecureResponse()
Obtains the value of the flag that indicates whether JASPI should be used to secure the HTTP response or not.
true
if the authenticator is to secure the response; false
otherwise.public void setSecureResponse(boolean secureResponse)
Sets the flag that indicates whether JASPI should be used to secure the HTTP response or not.
secureResponse
- true
if the authenticator is to secure the response; false
otherwise.protected org.jboss.security.ServerAuthenticationManager getServerAuthenticationManager()
Instantiates and returns the ServerAuthenticationManager
implementation.
ServerAuthenticationManager
instance.protected void register(org.apache.catalina.connector.Request request, javax.servlet.http.HttpServletResponse response, Principal principal, String authType, String username, String password)
Registers an authenticated Principal and authentication type in our request, in the current session (if there is one), and with our SingleSignOn valve, if there is one. Set the appropriate cookie to be returned.
register
in class org.apache.catalina.authenticator.AuthenticatorBase
request
- the servlet request we are processing.response
- the servlet response we are generating.principal
- the authenticated Principal
to be registered.authType
- the authentication type to be registered.username
- username used to authenticate (if any).password
- password used to authenticate (if any).Copyright © 2012 JBoss, a division of Red Hat, Inc.. All Rights Reserved.