public class DigestAuthenticator extends LoginAuthenticator
SecurityHandler.setInitParameter(String, String)
using the name "maxNonceAge". The nonce max count can be set with SecurityHandler.setInitParameter(String, String)
using the name "maxNonceCount". When the age or count is exceeded, the nonce is considered stale.Authenticator.AuthConfiguration, Authenticator.Factory_identityService, _loginService| 构造器和说明 |
|---|
DigestAuthenticator() |
| 限定符和类型 | 方法和说明 |
|---|---|
String |
getAuthMethod() |
long |
getMaxNonceAge() |
int |
getMaxNonceCount() |
org.eclipse.jetty.server.UserIdentity |
login(String username,
Object credentials,
javax.servlet.ServletRequest request) |
String |
newNonce(org.eclipse.jetty.server.Request request) |
boolean |
secureResponse(javax.servlet.ServletRequest req,
javax.servlet.ServletResponse res,
boolean mandatory,
org.eclipse.jetty.server.Authentication.User validatedUser)
is response secure
|
void |
setConfiguration(Authenticator.AuthConfiguration configuration)
Configure the Authenticator
|
void |
setMaxNonceAge(long maxNonceAgeInMillis) |
void |
setMaxNonceCount(int maxNC) |
org.eclipse.jetty.server.Authentication |
validateRequest(javax.servlet.ServletRequest req,
javax.servlet.ServletResponse res,
boolean mandatory)
Validate a request
|
getLoginService, prepareRequest, renewSessionpublic void setConfiguration(Authenticator.AuthConfiguration configuration)
AuthenticatorsetConfiguration 在接口中 AuthenticatorsetConfiguration 在类中 LoginAuthenticatorconfiguration - the configurationpublic int getMaxNonceCount()
public void setMaxNonceCount(int maxNC)
public long getMaxNonceAge()
public void setMaxNonceAge(long maxNonceAgeInMillis)
public String getAuthMethod()
public boolean secureResponse(javax.servlet.ServletRequest req,
javax.servlet.ServletResponse res,
boolean mandatory,
org.eclipse.jetty.server.Authentication.User validatedUser)
throws ServerAuthException
Authenticatorreq - the requestres - the responsemandatory - if security is mandatorvalidatedUser - the user that was validatedServerAuthException - if unable to test responsepublic org.eclipse.jetty.server.Authentication validateRequest(javax.servlet.ServletRequest req,
javax.servlet.ServletResponse res,
boolean mandatory)
throws ServerAuthException
Authenticatorreq - The requestres - The responsemandatory - True if authentication is mandatory.Authentication.User. If a response has
been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will
implement Authentication.ResponseSent. If Authentication is not manditory, then a
Authentication.Deferred may be returned.ServerAuthException - if unable to validate requestpublic org.eclipse.jetty.server.UserIdentity login(String username, Object credentials, javax.servlet.ServletRequest request)
login 在类中 LoginAuthenticatorpublic String newNonce(org.eclipse.jetty.server.Request request)
Copyright © 2017. All rights reserved.