Package org.apache.activemq.artemis.core.security.impl

Class SecurityStoreImpl

java.lang.Object

org.apache.activemq.artemis.core.security.impl.SecurityStoreImpl

All Implemented Interfaces:

SecurityStore, HierarchicalRepositoryChangeListener

public class SecurityStoreImpl
extends Object
implements SecurityStore, HierarchicalRepositoryChangeListener

The ActiveMQ Artemis SecurityStore implementation

Constructor Summary

Constructors

Constructor	Description
SecurityStoreImpl(HierarchicalRepository<Set<Role>> securityRepository, ActiveMQSecurityManager securityManager, long invalidationInterval, boolean securityEnabled, String managementClusterUser, String managementClusterPassword, NotificationService notificationService, long authenticationCacheSize, long authorizationCacheSize)

Method Summary

Modifier and Type	Method	Description
String	authenticate(String user, String password, RemotingConnection connection)
String	authenticate(String user, String password, RemotingConnection connection, String securityDomain)
void	check(SimpleString address, SimpleString queue, CheckType checkType, SecurityAuth session)
void	check(SimpleString address, CheckType checkType, SecurityAuth session)
long	getAuthenticationCacheSize()
long	getAuthorizationCacheSize()
Subject	getSessionSubject(SecurityAuth session)	Get the cached Subject.
static String	getUserFromSubject(Subject subject)
void	invalidateAuthenticationCache()
void	invalidateAuthorizationCache()
boolean	isSecurityEnabled()
void	onChange()
void	setSecurityEnabled(boolean securityEnabled)
void	stop()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityStoreImpl

public SecurityStoreImpl(HierarchicalRepository<Set<Role>> securityRepository,
                         ActiveMQSecurityManager securityManager,
                         long invalidationInterval,
                         boolean securityEnabled,
                         String managementClusterUser,
                         String managementClusterPassword,
                         NotificationService notificationService,
                         long authenticationCacheSize,
                         long authorizationCacheSize)

Parameters:

notificationService - can be null

Method Detail

isSecurityEnabled

public boolean isSecurityEnabled()

Specified by:

isSecurityEnabled in interface SecurityStore

setSecurityEnabled

public void setSecurityEnabled(boolean securityEnabled)

Specified by:

setSecurityEnabled in interface SecurityStore

stop

public void stop()

Specified by:

stop in interface SecurityStore

authenticate

public String authenticate(String user,
                           String password,
                           RemotingConnection connection)
                    throws Exception

Specified by:

authenticate in interface SecurityStore

Throws:

Exception

authenticate

public String authenticate(String user,
                           String password,
                           RemotingConnection connection,
                           String securityDomain)
                    throws Exception

Specified by:

authenticate in interface SecurityStore

Throws:

Exception

check

public void check(SimpleString address,
                  CheckType checkType,
                  SecurityAuth session)
           throws Exception

Specified by:

check in interface SecurityStore

Throws:

Exception

check

public void check(SimpleString address,
                  SimpleString queue,
                  CheckType checkType,
                  SecurityAuth session)
           throws Exception

Specified by:

check in interface SecurityStore

Throws:

Exception

onChange

public void onChange()

Specified by:

onChange in interface HierarchicalRepositoryChangeListener

getUserFromSubject

public static String getUserFromSubject(Subject subject)

getSessionSubject

public Subject getSessionSubject(SecurityAuth session)

Get the cached Subject. If the Subject is not in the cache then authenticate again to retrieve it.

Specified by:

getSessionSubject in interface SecurityStore

Parameters:

session - contains the authentication data

Returns:

the authenticated Subject with all associated role principals or null if not authenticated or JAAS is not supported by the SecurityManager.

invalidateAuthorizationCache

public void invalidateAuthorizationCache()

invalidateAuthenticationCache

public void invalidateAuthenticationCache()

getAuthenticationCacheSize

public long getAuthenticationCacheSize()

getAuthorizationCacheSize

public long getAuthorizationCacheSize()