| Package | Description |
|---|---|
| com.sun.enterprise.web.pwc.connector.coyote | |
| com.sun.web.security | |
| org.apache.catalina | |
| org.apache.catalina.authenticator |
This package contains
Authenticator implementations for the
various supported authentication methods (BASIC, DIGEST, and FORM). |
| org.apache.catalina.connector | |
| org.apache.catalina.core | |
| org.apache.catalina.realm |
This package contains
Realm implementations for the
various supported realm technologies for authenticating users and
identifying their associated roles. |
| Modifier and Type | Class and Description |
|---|---|
class |
PwcCoyoteRequest
Customized version of the Tomcat 5 CoyoteRequest
This is required for supporting Web Programmatic Login and setting the
request encoding (charset).
|
| Modifier and Type | Method and Description |
|---|---|
SecurityConstraint[] |
RealmAdapter.findSecurityConstraints(HttpRequest request,
Context context)
Returns null
1.
|
boolean |
RealmAdapter.hasResourcePermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
Context context)
Perform access control based on the specified authorization constraint.
|
boolean |
RealmAdapter.hasRole(HttpRequest request,
HttpResponse response,
Principal principal,
String role)
Check if the given principal has the provided role.
|
boolean |
RealmAdapter.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints)
Enforce any user data constraint required by the security constraint
guarding this request URI.
|
boolean |
RealmAdapter.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
String uri,
String method)
Checks if the given request URI and method are the target of any
user-data-constraint with a transport-guarantee of CONFIDENTIAL,
and whether any such constraint is already satisfied.
|
boolean |
RealmAdapter.invokeAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context,
Authenticator authenticator,
boolean calledFromAuthenticate)
Authenticates the user making this request, based on the specified
login configuration.
|
boolean |
RealmAdapter.invokePostAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context)
Post authentication for given request and response.
|
void |
RealmAdapter.logout(HttpRequest req) |
int |
RealmAdapter.preAuthenticateCheck(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
boolean disableProxyCaching,
boolean securePagesWithPragma,
boolean ssoEnabled)
Checks whether or not authentication is needed.
|
| Modifier and Type | Method and Description |
|---|---|
SecurityConstraint[] |
Realm.findSecurityConstraints(HttpRequest request,
Context context)
Return the SecurityConstraints configured to guard the request URI for
this request, or
null if there is no such constraint. |
String |
Realm.getAlternateAuthType(HttpRequest req)
Return an alternate auth type from the request if available.
|
Principal |
Realm.getAlternatePrincipal(HttpRequest req)
Return an alternate principal from the request if available.
|
boolean |
Realm.hasResourcePermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraint,
Context context)
Perform access control based on the specified authorization constraint.
|
boolean |
Realm.hasRole(HttpRequest request,
HttpResponse response,
Principal principal,
String role)
Return
true if the specified Principal has the specified
security role, within the context of this Realm; otherwise return
false. |
boolean |
Realm.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraint)
Enforce any user data constraint required by the security constraint
guarding this request URI.
|
boolean |
Realm.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
String uri,
String method)
Checks if the given request URI and method are the target of any
user-data-constraint with a transport-guarantee of CONFIDENTIAL,
and whether any such constraint is already satisfied.
|
boolean |
Realm.invokeAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context,
Authenticator authenticator,
boolean calledFromAuthenticate)
Authenticates the user making this request, based on the specified
login configuration.
|
boolean |
Realm.invokePostAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context)
Post authentication for given request and response.
|
void |
Authenticator.login(String userName,
char[] password,
HttpRequest request) |
void |
Authenticator.logout(HttpRequest request) |
void |
Realm.logout(HttpRequest hreq)
Logs out.
|
int |
Realm.preAuthenticateCheck(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
boolean disableProxyCaching,
boolean securePagesWithPragma,
boolean ssoEnabled)
Checks whether or not authentication is needed.
|
void |
Auditor.webInvocation(HttpRequest req,
boolean success)
Notify auditor of a servlet container invocation.
|
| Modifier and Type | Method and Description |
|---|---|
abstract boolean |
AuthenticatorBase.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user making this request, based on the specified
login configuration.
|
boolean |
NonLoginAuthenticator.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user making this request, based on the specified
login configuration.
|
boolean |
DigestAuthenticator.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user making this request, based on the specified
login configuration.
|
boolean |
SSLAuthenticator.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user by checking for the existence of a certificate
chain, and optionally asking a trust manager to validate that we trust
this user.
|
boolean |
FormAuthenticator.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user making this request, based on the specified
login configuration.
|
boolean |
BasicAuthenticator.authenticate(HttpRequest request,
HttpResponse response,
LoginConfig config)
Authenticate the user making this request, based on the specified
login configuration.
|
protected Principal |
AuthenticatorBase.doLogin(HttpRequest request,
String username,
char[] password)
Process the login request.
|
protected void |
FormAuthenticator.forwardToErrorPage(HttpRequest request,
HttpResponse response,
LoginConfig config)
Called to forward to the error page.
|
protected void |
FormAuthenticator.forwardToLoginPage(HttpRequest request,
HttpResponse response,
LoginConfig config)
Called to forward to the login page.
|
protected Session |
AuthenticatorBase.getSession(HttpRequest request)
Return the internal Session that is associated with this HttpRequest,
or
null if there is no such Session. |
protected Session |
AuthenticatorBase.getSession(HttpRequest request,
boolean create)
Return the internal Session that is associated with this HttpRequest,
possibly creating a new one if necessary, or
null if
there is no such session and we did not create one. |
void |
AuthenticatorBase.login(String username,
char[] password,
HttpRequest request) |
void |
AuthenticatorBase.logout(HttpRequest request) |
protected boolean |
FormAuthenticator.matchRequest(HttpRequest request)
Does this request match the saved one (so that it must be the redirect
we signaled after successful authentication?
|
protected void |
AuthenticatorBase.register(HttpRequest request,
HttpResponse response,
Principal principal,
String authType,
String username,
char[] password)
Register an authenticated Principal and authentication type in our
request, in the current session (if there is one), and with our
SingleSignOn valve, if there is one.
|
protected boolean |
FormAuthenticator.restoreRequest(HttpRequest request,
Session session)
Restore the original request from information stored in our session.
|
protected void |
FormAuthenticator.saveRequest(HttpRequest request,
Session session)
Save the original request information into our session.
|
| Modifier and Type | Class and Description |
|---|---|
class |
Request
Wrapper object for the Coyote request.
|
| Modifier and Type | Class and Description |
|---|---|
class |
DummyRequest
Dummy request object, used for request dispatcher mapping, as well as
JSP precompilation.
|
| Modifier and Type | Method and Description |
|---|---|
protected void |
RealmBase.disableProxyCaching(HttpRequest request,
HttpResponse response,
boolean disableProxyCaching,
boolean securePagesWithPragma) |
SecurityConstraint[] |
RealmBase.findSecurityConstraints(HttpRequest request,
Context context)
Return the SecurityConstraints configured to guard the request URI for
this request, or
null if there is no such constraint. |
String |
RealmBase.getAlternateAuthType(HttpRequest req)
Return an alternate auth type from the request if available.
|
Principal |
RealmBase.getAlternatePrincipal(HttpRequest req)
Return an alternate principal from the request if available.
|
boolean |
RealmBase.hasResourcePermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
Context context)
Perform access control based on the specified authorization constraint.
|
boolean |
RealmBase.hasRole(HttpRequest request,
HttpResponse response,
Principal principal,
String role)
Return
true if the specified Principal has the specified
security role, within the context of this Realm; otherwise return
false. |
boolean |
RealmBase.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints)
Enforce any user data constraint required by the security constraint
guarding this request URI.
|
boolean |
RealmBase.hasUserDataPermission(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
String uri,
String method)
Checks if the given request URI and method are the target of any
user-data-constraint with a transport-guarantee of CONFIDENTIAL,
and whether any such constraint is already satisfied.
|
boolean |
RealmBase.invokeAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context,
Authenticator authenticator,
boolean calledFromAuthenticate)
Authenticates the user making this request, based on the specified
login configuration.
|
boolean |
RealmBase.invokePostAuthenticateDelegate(HttpRequest request,
HttpResponse response,
Context context)
Post authentication for given request and response.
|
void |
RealmBase.logout(HttpRequest hreq) |
int |
RealmBase.preAuthenticateCheck(HttpRequest request,
HttpResponse response,
SecurityConstraint[] constraints,
boolean disableProxyCaching,
boolean securePagesWithPragma,
boolean ssoEnabled)
Checks whether or not authentication is needed.
|
Copyright © 2017. All rights reserved.