com.spotfire.server.security
Class JAASRegisteringAuthenticator

java.lang.Object
  com.spotfire.server.security.JAASRegisteringAuthenticator

All Implemented Interfaces:

Authenticator

public class JAASRegisteringAuthenticator
extends Object
implements Authenticator

An Authenticator implementation that uses the Java Authentication and Authorization Services (JAAS) to authenticate users. It differs from the default JAASAuthenticator implementation in that it automatically adds all successfully authenticated users to the user directory.

Since:

8.1

Constructor Summary

JAASRegisteringAuthenticator()

Method Summary

SecurityContext	authenticate(String userId, String password, AuthenticationContext authContext) Authenticates the user with the specified userId and password credentials, using the JAAS configuration specified by the configuration parameter to the setConfiguration method.
void	setConfiguration(String configuration) Set the name of the JAAS application configuration to be used when authenticating users.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JAASRegisteringAuthenticator

public JAASRegisteringAuthenticator()

Method Detail

setConfiguration

public void setConfiguration(String configuration)

Set the name of the JAAS application configuration to be used when authenticating users.

Specified by:

setConfiguration in interface Authenticator

Parameters:

configuration - configuration name

authenticate

public SecurityContext authenticate(String userId,
                                    String password,
                                    AuthenticationContext authContext)

Authenticates the user with the specified userId and password credentials, using the JAAS configuration specified by the configuration parameter to the setConfiguration method. If the authentication is successful, the method returns a SecurityContext object. If the authentication fails, the method returns null.

The userId and password arguments may not be null. The authContext argument is ignored. If a successfully authenticated user doesn't exist in the user directory, it is automatically added to it.

Specified by:

authenticate in interface Authenticator

Parameters:

userId - user id

password - password

authContext - authentication context (ignored)

Returns:

a SecurityContext if the authentication is successful, null if it fails