public class JBossWebRealm
extends org.apache.catalina.realm.RealmBase
RealmBase
implementationModifier and Type | Field and Description |
---|---|
protected org.jboss.security.audit.AuditManager |
auditManager
The
AuditManager instance that can audit security events |
protected org.jboss.security.AuthenticationManager |
authenticationManager
The
AuthenticationManager instance that can perform authentication |
protected org.jboss.security.AuthorizationManager |
authorizationManager
The
AuthorizationManager instance that is used for authorization as well as get roles |
protected org.jboss.security.CertificatePrincipal |
certMapping
The converter from X509 certificate chain to Principal
|
protected DeploymentUnit |
deploymnetUnit
The
DeploymentUnit associated with the Realm |
protected boolean |
disableAudit
Is Audit disabled?
|
protected org.jboss.security.mapping.MappingManager |
mappingManager
The
MappingManager instance to perform principal, role, attribute and credential mapping |
protected org.jboss.metadata.web.jboss.JBossWebMetaData |
metaData
MetaData associated with the DeploymentUnit
|
protected static String |
name |
protected Map<String,Set<String>> |
principalVersusRolesMap
JBoss specific role mapping set in the MetaData
|
protected boolean |
useJBossAuthorization
Is JBoss authorization framework enabled?
|
Constructor and Description |
---|
JBossWebRealm() |
Modifier and Type | Method and Description |
---|---|
Principal |
authenticate(String username,
byte[] credentials) |
Principal |
authenticate(String username,
String credentials) |
Principal |
authenticate(String username,
String clientDigest,
String nOnce,
String nc,
String cnonce,
String qop,
String realm,
String md5a2) |
Principal |
authenticate(X509Certificate[] certs) |
protected String |
getName() |
protected String |
getPassword(String username) |
protected Principal |
getPrincipal(String username) |
protected Principal |
getPrincipal(Subject subject)
Get the Principal given the authenticated Subject.
|
protected Set<Principal> |
getPrincipalRoles(Principal principal)
Access the set of role Principals associated with the given caller principal.
|
protected List<String> |
getPrincipalRoles(org.apache.catalina.connector.Request request)
Get the roles that is stored in the authenticated
GenericPrincipal |
Map<String,Set<String>> |
getPrincipalVersusRolesMap()
Returns the principal versus roles map
|
protected Subject |
getSubjectFromRequestPrincipal(Principal principal)
Retrieve the Subject stored in the Principal
|
boolean |
hasResourcePermission(org.apache.catalina.connector.Request request,
org.apache.catalina.connector.Response response,
org.apache.catalina.deploy.SecurityConstraint[] constraints,
org.apache.catalina.Context context) |
boolean |
hasRole(Principal principal,
String role) |
boolean |
hasUserDataPermission(org.apache.catalina.connector.Request request,
org.apache.catalina.connector.Response response,
org.apache.catalina.deploy.SecurityConstraint[] constraints) |
protected List<String> |
mapUserRoles(List<String> rolesList) |
protected String |
requestURI(org.apache.catalina.connector.Request request)
Get the canonical request URI from the request mapping data requestPath
|
void |
setAuditManager(org.jboss.security.audit.AuditManager auditManager)
Set the
AuditManager |
void |
setAuthenticationManager(org.jboss.security.AuthenticationManager authenticationManager)
Set the
AuthenticationManager |
void |
setAuthorizationManager(org.jboss.security.AuthorizationManager authorizationManager)
Set the
AuthorizationManager |
void |
setDeploymentUnit(DeploymentUnit deploymentUnit)
Set the
DeploymentUnit |
void |
setMappingManager(org.jboss.security.mapping.MappingManager mappingManager)
Set the
MappingManager |
addLifecycleListener, addPropertyChangeListener, backgroundProcess, destroy, digest, Digest, findLifecycleListeners, findSecurityConstraints, getAllRolesMode, getContainer, getController, getDigest, getDigest, getDigestEncoding, getDomain, getInfo, getObjectName, getPrincipal, getRealmPath, getRealmSuffix, getServer, getType, getValidate, hasMessageDigest, init, main, postDeregister, postRegister, preDeregister, preRegister, removeLifecycleListener, removePropertyChangeListener, setAllRolesMode, setContainer, setController, setDigest, setDigestEncoding, setRealmPath, setValidate, start, stop
protected static final String name
protected org.jboss.security.audit.AuditManager auditManager
AuditManager
instance that can audit security eventsprotected org.jboss.security.AuthenticationManager authenticationManager
AuthenticationManager
instance that can perform authenticationprotected org.jboss.security.AuthorizationManager authorizationManager
AuthorizationManager
instance that is used for authorization as well as get rolesprotected org.jboss.security.mapping.MappingManager mappingManager
MappingManager
instance to perform principal, role, attribute and credential mappingprotected org.jboss.security.CertificatePrincipal certMapping
protected DeploymentUnit deploymnetUnit
DeploymentUnit
associated with the Realmprotected org.jboss.metadata.web.jboss.JBossWebMetaData metaData
protected Map<String,Set<String>> principalVersusRolesMap
protected boolean useJBossAuthorization
protected boolean disableAudit
public void setAuthenticationManager(org.jboss.security.AuthenticationManager authenticationManager)
AuthenticationManager
authenticationManager
- public void setAuditManager(org.jboss.security.audit.AuditManager auditManager)
AuditManager
auditManager
- public void setAuthorizationManager(org.jboss.security.AuthorizationManager authorizationManager)
AuthorizationManager
authorizationManager
- public void setMappingManager(org.jboss.security.mapping.MappingManager mappingManager)
MappingManager
mappingManager
- public void setDeploymentUnit(DeploymentUnit deploymentUnit)
DeploymentUnit
deploymentUnit
- public Map<String,Set<String>> getPrincipalVersusRolesMap()
public Principal authenticate(String username, String credentials)
authenticate
in interface org.apache.catalina.Realm
authenticate
in class org.apache.catalina.realm.RealmBase
public Principal authenticate(X509Certificate[] certs)
authenticate
in interface org.apache.catalina.Realm
authenticate
in class org.apache.catalina.realm.RealmBase
public Principal authenticate(String username, byte[] credentials)
authenticate
in interface org.apache.catalina.Realm
authenticate
in class org.apache.catalina.realm.RealmBase
public Principal authenticate(String username, String clientDigest, String nOnce, String nc, String cnonce, String qop, String realm, String md5a2)
authenticate
in interface org.apache.catalina.Realm
authenticate
in class org.apache.catalina.realm.RealmBase
protected String getName()
getName
in class org.apache.catalina.realm.RealmBase
protected String getPassword(String username)
getPassword
in class org.apache.catalina.realm.RealmBase
protected Principal getPrincipal(String username)
getPrincipal
in class org.apache.catalina.realm.RealmBase
protected Principal getPrincipal(Subject subject)
Group
is
considered or the single principal inside the CallerPrincipal group.subject
- public boolean hasResourcePermission(org.apache.catalina.connector.Request request, org.apache.catalina.connector.Response response, org.apache.catalina.deploy.SecurityConstraint[] constraints, org.apache.catalina.Context context) throws IOException
hasResourcePermission
in interface org.apache.catalina.Realm
hasResourcePermission
in class org.apache.catalina.realm.RealmBase
IOException
public boolean hasRole(Principal principal, String role)
hasRole
in interface org.apache.catalina.Realm
hasRole
in class org.apache.catalina.realm.RealmBase
public boolean hasUserDataPermission(org.apache.catalina.connector.Request request, org.apache.catalina.connector.Response response, org.apache.catalina.deploy.SecurityConstraint[] constraints) throws IOException
hasUserDataPermission
in interface org.apache.catalina.Realm
hasUserDataPermission
in class org.apache.catalina.realm.RealmBase
IOException
protected Subject getSubjectFromRequestPrincipal(Principal principal)
principal
- the Principal present in the Requestprotected Set<Principal> getPrincipalRoles(Principal principal)
principal
- - the Principal mapped from the authentication principal and visible from the
HttpServletRequest.getUserPrincipalprotected List<String> getPrincipalRoles(org.apache.catalina.connector.Request request)
GenericPrincipal
request
- protected String requestURI(org.apache.catalina.connector.Request request)
request
- Copyright © 2012 JBoss, a division of Red Hat, Inc.. All Rights Reserved.