Class ConfigurableSpnegoAuthenticator
java.lang.Object
org.eclipse.jetty.security.authentication.LoginAuthenticator
org.eclipse.jetty.security.authentication.ConfigurableSpnegoAuthenticator
- All Implemented Interfaces:
Authenticator
A LoginAuthenticator that uses SPNEGO and the GSS API to authenticate requests.
A successful authentication from a client is cached for a configurable
duration
using the HTTP session; this avoids
that the client is asked to authenticate for every request.
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionprivate static class
Nested classes/interfaces inherited from interface org.eclipse.jetty.security.Authenticator
Authenticator.AuthConfiguration, Authenticator.Factory
-
Field Summary
FieldsModifier and TypeFieldDescriptionprivate Duration
private final String
private static final Logger
Fields inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator
_identityService, _loginService
-
Constructor Summary
ConstructorsConstructorDescriptionConfigurableSpnegoAuthenticator
(String authMethod) Allow for a custom authMethod value to be set for instances where SPNEGO may not be appropriate -
Method Summary
Modifier and TypeMethodDescriptionprivate String
getSpnegoToken
(String header) Only renew the session id if the user has been fully authenticated, don't renew the session for any of the intermediate request/response handshakes.boolean
secureResponse
(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory, Authentication.User validatedUser) is response secureprivate void
sendChallenge
(javax.servlet.http.HttpServletResponse response, String token) void
setAuthenticationDuration
(Duration authenticationDuration) Sets the duration of the authentication.private void
setSpnegoToken
(javax.servlet.http.HttpServletResponse response, String token) validateRequest
(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res, boolean mandatory) Validate a requestMethods inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator
getLoginService, logout, prepareRequest, renewSession, setConfiguration
-
Field Details
-
LOG
-
_authMethod
-
_authenticationDuration
-
-
Constructor Details
-
ConfigurableSpnegoAuthenticator
public ConfigurableSpnegoAuthenticator() -
ConfigurableSpnegoAuthenticator
Allow for a custom authMethod value to be set for instances where SPNEGO may not be appropriate- Parameters:
authMethod
- the auth method
-
-
Method Details
-
getAuthMethod
- Returns:
- The name of the authentication method
-
getAuthenticationDuration
- Returns:
- the authentication duration
-
setAuthenticationDuration
Sets the duration of the authentication.
A negative duration means that the authentication is only valid for the current request.
A zero duration means that the authentication is valid forever.
A positive value means that the authentication is valid for the specified duration.
- Parameters:
authenticationDuration
- the authentication duration
-
login
public UserIdentity login(String username, Object password, javax.servlet.ServletRequest servletRequest) Only renew the session id if the user has been fully authenticated, don't renew the session for any of the intermediate request/response handshakes.- Overrides:
login
in classLoginAuthenticator
- Parameters:
username
- the username of the client to be authenticatedpassword
- the user's credentialservletRequest
- the inbound request that needs authentication
-
validateRequest
public Authentication validateRequest(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res, boolean mandatory) throws ServerAuthException Description copied from interface:Authenticator
Validate a request- Parameters:
req
- The requestres
- The responsemandatory
- True if authentication is mandatory.- Returns:
- An Authentication. If Authentication is successful, this will be a
Authentication.User
. If a response has been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will implementAuthentication.ResponseSent
. If Authentication is not mandatory, then aAuthentication.Deferred
may be returned. - Throws:
ServerAuthException
- if unable to validate request
-
sendChallenge
private void sendChallenge(javax.servlet.http.HttpServletResponse response, String token) throws ServerAuthException - Throws:
ServerAuthException
-
setSpnegoToken
-
getSpnegoToken
-
secureResponse
public boolean secureResponse(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory, Authentication.User validatedUser) Description copied from interface:Authenticator
is response secure- Parameters:
request
- the requestresponse
- the responsemandatory
- if security is mandatorvalidatedUser
- the user that was validated- Returns:
- true if response is secure
-