org.glassfish.admingui.common.security

Class AdminConsoleAuthModule

java.lang.Object

org.glassfish.admingui.common.security.AdminConsoleAuthModule

All Implemented Interfaces:

javax.security.auth.message.module.ServerAuthModule, javax.security.auth.message.ServerAuth

public class AdminConsoleAuthModule
extends Object
implements javax.security.auth.message.module.ServerAuthModule

This class is responsible for providing the Authentication support needed by the admin console to both access the admin console pages as well as invoke REST requests.

Field Summary

Fields

Modifier and Type	Field and Description
static String	REST_SERVER_NAME The Session key for the REST Server Name.
static String	REST_SERVER_PORT The Session key for the REST Server Port.
static String	REST_TOKEN The Session key for the REST authentication token.

Constructor Summary

Constructors

Constructor and Description
AdminConsoleAuthModule()

Method Summary

Modifier and Type	Method and Description
void	cleanSubject(javax.security.auth.message.MessageInfo messageInfo, Subject subject)
Class[]	getSupportedMessageTypes()
void	initialize(javax.security.auth.message.MessagePolicy requestPolicy, javax.security.auth.message.MessagePolicy responsePolicy, CallbackHandler handler, Map options) This method configures this AuthModule and makes sure all the information needed to continue is present.
javax.security.auth.message.AuthStatus	secureResponse(javax.security.auth.message.MessageInfo messageInfo, Subject serviceSubject)
javax.security.auth.message.AuthStatus	validateRequest(javax.security.auth.message.MessageInfo messageInfo, Subject clientSubject, Subject serviceSubject) This is where the validation happens...

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

REST_SERVER_NAME

public static final String REST_SERVER_NAME

The Session key for the REST Server Name.

See Also:

Constant Field Values

REST_SERVER_PORT

public static final String REST_SERVER_PORT

The Session key for the REST Server Port.

See Also:

Constant Field Values

REST_TOKEN

public static final String REST_TOKEN

The Session key for the REST authentication token.

See Also:

Constant Field Values

Constructor Detail

AdminConsoleAuthModule

public AdminConsoleAuthModule()

Method Detail

initialize

public void initialize(javax.security.auth.message.MessagePolicy requestPolicy,
                       javax.security.auth.message.MessagePolicy responsePolicy,
                       CallbackHandler handler,
                       Map options)
                throws javax.security.auth.message.AuthException

This method configures this AuthModule and makes sure all the information needed to continue is present.

Specified by:

initialize in interface javax.security.auth.message.module.ServerAuthModule

Throws:

javax.security.auth.message.AuthException

getSupportedMessageTypes

public Class[] getSupportedMessageTypes()

Specified by:

getSupportedMessageTypes in interface javax.security.auth.message.module.ServerAuthModule

validateRequest

public javax.security.auth.message.AuthStatus validateRequest(javax.security.auth.message.MessageInfo messageInfo,
                                                              Subject clientSubject,
                                                              Subject serviceSubject)
                                                       throws javax.security.auth.message.AuthException

This is where the validation happens...

Specified by:

validateRequest in interface javax.security.auth.message.ServerAuth

Throws:

javax.security.auth.message.AuthException

secureResponse

public javax.security.auth.message.AuthStatus secureResponse(javax.security.auth.message.MessageInfo messageInfo,
                                                             Subject serviceSubject)
                                                      throws javax.security.auth.message.AuthException

Specified by:

secureResponse in interface javax.security.auth.message.ServerAuth

Throws:

javax.security.auth.message.AuthException

cleanSubject

public void cleanSubject(javax.security.auth.message.MessageInfo messageInfo,
                         Subject subject)
                  throws javax.security.auth.message.AuthException

Specified by:

cleanSubject in interface javax.security.auth.message.ServerAuth

Throws:

javax.security.auth.message.AuthException