All Classes and Interfaces
Class
Description
Provides a base set of implementations and properties for
PersonAttributeDao
implementations that aggregate results from a sub List of PersonAttributeDao.Base class for all authentication handlers that support configurable naming.
Base class for CAS credentials that are safe for long-term storage.
This is
AbstractFlatteningPersonAttributeDao.Abstract authentication handler that allows deployers to utilize the bundled
AuthenticationHandlers while providing a mechanism to perform tasks before
and after authentication.
Provides common functionality for DAOs using a set of attribute values from the seed to
perform a query.
Abstract class to override supports so that we don't need to duplicate the
check for UsernamePasswordCredential.
Handler that contains a list of valid users and passwords.
Describes an authentication error condition where a user account has been administratively disabled.
Describes an authentication error condition where a user account's password must change before login.
This is
AccountsPreDefinedLoginModule.Static principal added to the subject when authn is successful.
Authentication security policy that is satisfied iff all given authentication handlers are successfully authenticated.
Authentication security policy that is satisfied iff all given credentials are successfully authenticated.
Authentication policy that is satisfied by at least one successfully authenticated credential.
This is
AttributeRepositoryResolver.Merges the Sets of Persons additively calling the abstract
BaseAdditiveAttributeMerger.mergePersonAttributes(Map, Map) method on the
attributes of Persons that exist in both sets.Authentication security policy that is satisfied iff a specified
authentication handler successfully authenticates
at least one credential.
This is
BaseAuthenticationMetaDataPopulator.This is
BaseAuthenticationPolicy.This is
BaseIPAddressIntelligenceService.Base
PersonAttributeDao that provides implementations of the deprecated methods.Basic credential metadata implementation that stores the original credential ID and the original credential type.
This is
BasicIdentifiableCredential, a simple credential implementation
that is only recognized by its id.This is
BlackDotIPAddressIntelligenceService.This is
ByCredentialSourceAuthenticationHandlerResolver
that attempts to capture the source from the credential
and limit the handlers to the matching source.This is
CacheCredentialsCipherExecutor.We utilize the
AuthenticationMetaDataPopulator to retrieve and store
the password as an authentication attribute under the key
AUTHENTICATION_ATTRIBUTE_PASSWORD.The enum Case canonicalization mode.
This is
CasSSLContext.This is
ChainingPrincipalElectionStrategy.Delegates to one or more principal resolves in series to resolve a principal.
Looks up the user's attribute Map in the backingMap.
This is
CoreAuthenticationUtils.This is
DefaultAdaptiveAuthenticationPolicy.This is
DefaultAttributeDefinition.This is
DefaultAttributeDefinitionStore.Immutable authentication event whose attributes may not change after creation.
Constructs immutable
Authentication objects using the builder pattern.Contains information about a successful authentication produced by an
AuthenticationHandler.This is
DefaultAuthenticationHandlerResolver.This is
DefaultAuthenticationManager, which provides common operations
around an authentication manager implementation.The
DefaultAuthenticationResult represents a concrete implementation of AuthenticationResult.This is
DefaultAuthenticationResultBuilder.This is
DefaultAuthenticationServiceSelectionStrategy which returns back to the caller
the provided service, as it was without any additional processing.This is
DefaultAuthenticationSystemSupport.This is
DefaultAuthenticationTransaction.This is
DefaultCasSSLContext.This is
DefaultIPAddressIntelligenceService.This is
DefaultPrincipalElectionStrategy that selects the primary principal
to be the first principal in the chain of authentication history.Factory to create
SimplePrincipal objects.This is
EchoingPrincipalResolver.Authentication security policy that is satisfied iff a specified
authentication handler is not part of successful authn handlers.
This is
GroovyAuthenticationHandlerResolver.This is
GroovyAuthenticationPostProcessor.This is
GroovyAuthenticationPreProcessor.This is
GroovyIPAddressIntelligenceService.This is
GroovyPasswordEncoder.This is
GroovyPasswordPolicyHandlingStrategy.Factory to create
SimplePrincipal objects.This is
GroovyScriptAuthenticationPolicy.A credential representing an HTTP endpoint given by a URL.
Describes an error condition where authentication occurs from a location that is disallowed by security policy
applied to the underlying user account.
Describes an error condition where authentication occurs at a time that is disallowed by security policy
applied to the underlying user account.
JAAS Authentication Handler for CAS.
A
PersonAttributeDao implementation which iterates over child
PersonAttributeDao queries each with the same data and merges their
reported attributes in a configurable way.Describes an error condition where non-identical principals have been resolved while authenticating
multiple credentials.
Merger that retains values from both maps.
Merger which implements accumulation of Map entries such that entries once
established are individually immutable.
Authentication policy that defines success as at least one authentication success and no authentication attempts
that were prevented by system errors.
Null principal implementation that allows us to construct
Authentications in the event that no
principal is resolved during the authentication process.Describes a one-time-password credential that contains an optional unique identifier and required password.
This is
OneTimeToken.This is
OneTimeTokenAccount.This is
OneTimeTokenCredential.This is
PasswordEncoderUtils.Message conveying account password expiration warning details.
Container for password policy configuration.
This is
PrincipalAttributeRepositoryFetcher.This is
PrincipalElectionStrategyConfigurer.This is
PrincipalFactoryUtils.This is
PrincipalNameTransformerUtils.Class to validate the credential presented by communicating with the web
server and checking the certificate that is returned against the hostname,
etc.
Provides the most basic means of principal resolution.
This is
RegisteredServiceAuthenticationHandlerResolver
that acts on the criteria presented by a registered service to
detect which handler(s) should be resolved for authentication.This is
RegisteredServiceAuthenticationPolicyResolver
that acts on the criteria presented by a registered service to
detect which handler(s) should be resolved for authentication.Determines if the credential provided are for Remember Me Services and then sets the appropriate
Authentication attribute if remember me services have been requested.
Handles both remember me services and username and password.
Attribute merge strategy whereby considered attributes over-write
previously set values for attributes with colliding names.
Authentication security policy that is satisfied iff
required attributes are found in
Authentication
or Principal.Authentication security policy that is satisfied iff a specified
authentication handler successfully authenticates
at least one credential.
This is
RestfulAuthenticationPolicy.This is
RestfulIPAddressIntelligenceService.This is
RestfulPrincipalFactory.This is
ReturnChangesAttributeMerger.This is
ReturnOriginalAttributeMerger.Generates PersistentIds based on the Shibboleth algorithm.
Represents a simple person with its attributes.
Simple implementation of a
Principal that exposes an unmodifiable
map of attributes.Provides the username attribute based on a pre-configured string.
Provides the ability to define static attributes and values.
Sets an authentication attribute containing the collection of authentication handlers (by name) that successfully
authenticated credential.
This is
UniquePrincipalAuthenticationPolicy
that prevents authentication if the same principal id
is found more than one in the registry.This is
UniquePrincipalRequiredException.Describes an error condition where a principal could not be resolved.
Error condition arising at ticket creation or validation time when a ticketing operation relying on authentication
cannot proceed due to unsatisfied authentication security policy.
Credential for authenticating with a username and password.