Package org.apereo.cas.authentication

Authentication validates the Credentials provided during a /login request. In this context, "Credentials" are an opaque object declared with the Credentials marker interface. The AuthenticationManager typically passes the Credentials to a sequence of plug-in elements to see if any of them can recognize and process the concrete implementing type.

Successful authentication generates a Principal object wrapped in an Authentication object. All these objects must be serializable, and the Authentication becomes part of the TGT in the ticket cache.

Unsucessful authentication must throw an AuthenticationException. The AuthenticationManager may not return null to signal a failure.

Since:

3.0

Class Summary

Class	Description
AbstractAuthenticationHandler	Base class for all authentication handlers that support configurable naming.
AbstractCredential	Base class for CAS credentials that are safe for long-term storage.
AcceptUsersAuthenticationHandler	Handler that contains a list of valid users and passwords.
AuthenticationCredentialsThreadLocalBinder	ThreadLocal based holder for current set of credentials and/or authentication object for any current CAS authentication transaction.
BasicCredentialMetaData	Basic credential metadata implementation that stores the original credential ID and the original credential type.
BasicIdentifiableCredential	This is BasicIdentifiableCredential, a simple credential implementation that is only recognized by its id.
CoreAuthenticationUtils	This is CoreAuthenticationUtils.
DefaultAuthentication	Immutable authentication event whose attributes may not change after creation.
DefaultAuthenticationBuilder	Constructs immutable Authentication objects using the builder pattern.
DefaultAuthenticationEventExecutionPlan	This is DefaultAuthenticationEventExecutionPlan.
DefaultAuthenticationHandlerExecutionResult	Contains information about a successful authentication produced by an AuthenticationHandler.
DefaultAuthenticationResult	The DefaultAuthenticationResult represents a concrete implementation of AuthenticationResult.
DefaultAuthenticationResultBuilder	This is DefaultAuthenticationResultBuilder.
DefaultAuthenticationServiceSelectionPlan	This is DefaultAuthenticationServiceSelectionPlan.
DefaultAuthenticationServiceSelectionStrategy	This is DefaultAuthenticationServiceSelectionStrategy which returns back to the caller the provided service, as it was without any additional processing.
DefaultAuthenticationSystemSupport	This is DefaultAuthenticationSystemSupport.
DefaultAuthenticationTransactionManager	This is DefaultAuthenticationTransactionManager.
DefaultCasSslContext	This is DefaultCasSslContext.
DefaultPrincipalElectionStrategy	This is DefaultPrincipalElectionStrategy that selects the primary principal to be the first principal in the chain of authentication history.
GroovyAuthenticationPreProcessor	This is GroovyAuthenticationPreProcessor.
HttpBasedServiceCredential	A credential representing an HTTP endpoint given by a URL.
OneTimePasswordCredential	Describes a one-time-password credential that contains an optional unique identifier and required password.
OneTimeToken	This is OneTimeToken.
OneTimeTokenAccount	This is OneTimeTokenAccount.
OneTimeTokenCredential	This is OneTimeTokenCredential.
PolicyBasedAuthenticationManager	This is PolicyBasedAuthenticationManager, which provides common operations around an authentication manager implementation.
PseudoPlatformTransactionManager	This is PseudoPlatformTransactionManager.
RememberMeUsernamePasswordCredential	Handles both remember me services and username and password.
UsernamePasswordCredential	Credential for authenticating with a username and password.