All Classes and Interfaces

Class
Description
Provides a base set of implementations and properties for PersonAttributeDao implementations that aggregate results from a sub List of PersonAttributeDao.
Base class for all authentication handlers that support configurable naming.
Base class for CAS credentials that are safe for long-term storage.
Abstract authentication handler that allows deployers to utilize the bundled AuthenticationHandlers while providing a mechanism to perform tasks before and after authentication.
Provides common functionality for DAOs using a set of attribute values from the seed to perform a query.
Abstract class to override supports so that we don't need to duplicate the check for UsernamePasswordCredential.
Handler that contains a list of valid users and passwords.
Describes an authentication error condition where a user account has been administratively disabled.
Describes an authentication error condition where a user account's password must change before login.
Static principal added to the subject when authn is successful.
Authentication security policy that is satisfied iff all given authentication handlers are successfully authenticated.
Authentication security policy that is satisfied iff all given credentials are successfully authenticated.
Authentication policy that is satisfied by at least one successfully authenticated credential.
 
 
Merges the Sets of Persons additively calling the abstract BaseAdditiveAttributeMerger.mergePersonAttributes(Map, Map) method on the attributes of Persons that exist in both sets.
Authentication security policy that is satisfied iff a specified authentication handler successfully authenticates at least one credential.
Base PersonAttributeDao that provides implementations of the deprecated methods.
Basic credential metadata implementation that stores the original credential ID and the original credential type.
This is BasicIdentifiableCredential, a simple credential implementation that is only recognized by its id.
This is ByCredentialSourceAuthenticationHandlerResolver that attempts to capture the source from the credential and limit the handlers to the matching source.
We utilize the AuthenticationMetaDataPopulator to retrieve and store the password as an authentication attribute under the key AUTHENTICATION_ATTRIBUTE_PASSWORD.
The enum Case canonicalization mode.
This is CasSSLContext.
 
 
Delegates to one or more principal resolves in series to resolve a principal.
Looks up the user's attribute Map in the backingMap.
 
Immutable authentication event whose attributes may not change after creation.
Constructs immutable Authentication objects using the builder pattern.
Contains information about a successful authentication produced by an AuthenticationHandler.
This is DefaultAuthenticationManager, which provides common operations around an authentication manager implementation.
The DefaultAuthenticationResult represents a concrete implementation of AuthenticationResult.
 
This is DefaultAuthenticationServiceSelectionStrategy which returns back to the caller the provided service, as it was without any additional processing.
This is DefaultPrincipalElectionStrategy that selects the primary principal to be the first principal in the chain of authentication history.
Factory to create SimplePrincipal objects.
Authentication security policy that is satisfied iff a specified authentication handler is not part of successful authn handlers.
Factory to create SimplePrincipal objects.
A credential representing an HTTP endpoint given by a URL.
Describes an error condition where authentication occurs from a location that is disallowed by security policy applied to the underlying user account.
Describes an error condition where authentication occurs at a time that is disallowed by security policy applied to the underlying user account.
JAAS Authentication Handler for CAS.
A PersonAttributeDao implementation which iterates over child PersonAttributeDao queries each with the same data and merges their reported attributes in a configurable way.
Describes an error condition where non-identical principals have been resolved while authenticating multiple credentials.
Merger that retains values from both maps.
Merger which implements accumulation of Map entries such that entries once established are individually immutable.
Authentication policy that defines success as at least one authentication success and no authentication attempts that were prevented by system errors.
Null principal implementation that allows us to construct Authentications in the event that no principal is resolved during the authentication process.
Describes a one-time-password credential that contains an optional unique identifier and required password.
This is OneTimeToken.
 
Message conveying account password expiration warning details.
Container for password policy configuration.
 
Class to validate the credential presented by communicating with the web server and checking the certificate that is returned against the hostname, etc.
Provides the most basic means of principal resolution.
This is RegisteredServiceAuthenticationHandlerResolver that acts on the criteria presented by a registered service to detect which handler(s) should be resolved for authentication.
This is RegisteredServiceAuthenticationPolicyResolver that acts on the criteria presented by a registered service to detect which handler(s) should be resolved for authentication.
Determines if the credential provided are for Remember Me Services and then sets the appropriate Authentication attribute if remember me services have been requested.
Handles both remember me services and username and password.
Attribute merge strategy whereby considered attributes over-write previously set values for attributes with colliding names.
Authentication security policy that is satisfied iff required attributes are found in Authentication or Principal.
Authentication security policy that is satisfied iff a specified authentication handler successfully authenticates at least one credential.
Generates PersistentIds based on the Shibboleth algorithm.
Represents a simple person with its attributes.
Simple implementation of a Principal that exposes an unmodifiable map of attributes.
Provides the username attribute based on a pre-configured string.
Provides the ability to define static attributes and values.
Sets an authentication attribute containing the collection of authentication handlers (by name) that successfully authenticated credential.
This is UniquePrincipalAuthenticationPolicy that prevents authentication if the same principal id is found more than one in the registry.
Describes an error condition where a principal could not be resolved.
Error condition arising at ticket creation or validation time when a ticketing operation relying on authentication cannot proceed due to unsatisfied authentication security policy.
Credential for authenticating with a username and password.