Package org.apache.druid.server.security

Interface Summary

Interface	Description
Authenticator
Authorizer
Escalator	This interface provides methods needed for escalating internal system requests with priveleged authentication credentials.
TLSCertificateChecker	This extension point allows developers to replace the standard TLS certificate checks with custom checks.

Class Summary

Class	Description
Access
AllowAllAuthenticator	Should only be used in conjunction with AllowAllAuthorizer.
AllowAllAuthorizer
AllowHttpMethodsResourceFilter	Filters requests based on the HTTP method.
AllowOptionsResourceFilter
AnonymousAuthenticator	Authenticates all requests and directs them to an authorizer.
AuthConfig
AuthenticationOnlyResourceFilter	Sets necessary request attributes for requests sent to endpoints that need authentication but no authorization.
AuthenticationResult	An AuthenticationResult contains information about a successfully authenticated request.
AuthenticationUtils
AuthenticationWrappingFilter	Used to wrap Filters created by Authenticators, this wrapper filter skips itself if a request already has an authentication check (so that Authenticator implementations don't have to perform this check themselves)
AuthenticatorMapper
AuthorizationUtils	Static utility functions for performing authorization checks.
AuthorizerMapper
AuthTestUtils
CustomCheckX509TrustManager
DefaultTLSCertificateChecker
DefaultTLSCertificateCheckerModule
NoopEscalator
PreResponseAuthorizationCheckFilter	Filter that verifies that authorization checks were applied to an HTTP request, before sending a response.
Resource
ResourceAction
SecuritySanityCheckFilter
TLSCertificateCheckerModule
TLSCertificateCheckerModule.TLSCertificateCheckerProvider
TLSUtils
TLSUtils.ClientSSLContextBuilder
TrustedDomainAuthenticator	Authenticates requests coming from a specific domain and directs them to an authorizer.
UnsecuredResourceFilter	Sets necessary request attributes for requests sent to endpoints that don't need authentication or authorization checks.

Enum Summary

Enum	Description
Action
ResourceType

Exception Summary

Exception	Description
ForbiddenException	Throw this when a request is unauthorized and we want to send a 403 response back, Jersey exception mapper will take care of sending the response.