public class SpnegoAuthenticator extends LoginAuthenticator
Authenticator.AuthConfiguration, Authenticator.Factory
Modifier and Type | Field and Description |
---|---|
private java.lang.String |
_authMethod |
private static Logger |
LOG |
_identityService, _loginService
Constructor and Description |
---|
SpnegoAuthenticator() |
SpnegoAuthenticator(java.lang.String authMethod)
Allow for a custom authMethod value to be set for instances where SPENGO may not be appropriate
|
Modifier and Type | Method and Description |
---|---|
java.lang.String |
getAuthMethod() |
(package private) java.lang.String |
getAuthSchemeFromHeader(java.lang.String header)
Extracts the auth_scheme from the HTTP Authorization header,
Authorization: <auth_scheme> <token> . |
(package private) boolean |
isAuthSchemeNegotiate(java.lang.String authScheme)
Determines if provided auth scheme text from the Authorization header is case-insensitively
equal to
negotiate . |
boolean |
secureResponse(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
boolean mandatory,
Authentication.User validatedUser)
is response secure
|
Authentication |
validateRequest(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
boolean mandatory)
Validate a request
|
getLoginService, login, prepareRequest, renewSession, setConfiguration
private static final Logger LOG
private java.lang.String _authMethod
public SpnegoAuthenticator()
public SpnegoAuthenticator(java.lang.String authMethod)
authMethod
- the auth methodpublic java.lang.String getAuthMethod()
public Authentication validateRequest(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory) throws ServerAuthException
Authenticator
request
- The requestresponse
- The responsemandatory
- True if authentication is mandatory.Authentication.User
. If a response has
been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will
implement Authentication.ResponseSent
. If Authentication is not manditory, then a
Authentication.Deferred
may be returned.ServerAuthException
- if unable to validate requestjava.lang.String getAuthSchemeFromHeader(java.lang.String header)
Authorization: <auth_scheme> <token>
.header
- The HTTP Authorization header or null.boolean isAuthSchemeNegotiate(java.lang.String authScheme)
negotiate
.authScheme
- The auth scheme component of the Authorization headernegotiate
, False otherwise.public boolean secureResponse(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory, Authentication.User validatedUser) throws ServerAuthException
Authenticator
request
- the requestresponse
- the responsemandatory
- if security is mandatorvalidatedUser
- the user that was validatedServerAuthException
- if unable to test response