java.lang.Object
- org.apache.druid.server.security.AuthConfig

```
public class AuthConfig
extends Object
```

Nested Class Summary

Nested Classes
Modifier and Type Class Description

static class AuthConfig.Builder
AuthConfig object is created via Jackson in production.

Field Summary

Fields
Modifier and Type	Field	Description
`static String`	`ALLOW_ALL_NAME`
`static Set<String>`	`ALLOWED_CONTEXT_KEYS`	Set of context keys which are always permissible because something in the Druid code itself sets the key before the security check.
`static String`	`ANONYMOUS_NAME`
`static String`	`DRUID_ALLOW_UNSECURED_PATH`
`static String`	`DRUID_AUTHENTICATION_RESULT`	HTTP attribute that holds an AuthenticationResult, with info about a successful authentication check.
`static String`	`DRUID_AUTHORIZATION_CHECKED`	HTTP attribute set when a static method in AuthorizationUtils performs an authorization check on the request.
`static String`	`TRUSTED_DOMAIN_NAME`

Constructor Summary

Constructors
Constructor	Description
`AuthConfig()`
`AuthConfig(List<String> authenticatorChain, List<String> authorizers, List<String> unsecuredPaths, boolean allowUnauthenticatedHttpOptions, boolean authorizeQueryContextParams, Set<String> unsecuredContextKeys, Set<String> securedContextKeys, boolean enableInputSourceSecurity)`

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`boolean`	`authorizeQueryContextParams()`
`Set<String>`	`contextKeysToAuthorize(Set<String> userKeys)`	Filter the user-supplied context keys based on the context key security rules.
`boolean`	`equals(Object o)`
`List<String>`	`getAuthenticatorChain()`
`List<String>`	`getAuthorizers()`
`List<String>`	`getUnsecuredPaths()`
`int`	`hashCode()`
`boolean`	`isAllowUnauthenticatedHttpOptions()`
`boolean`	`isEnableInputSourceSecurity()`
`static AuthConfig.Builder`	`newBuilder()`
`String`	`toString()`

Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, wait, wait, wait

- Field Detail
  - DRUID_AUTHENTICATION_RESULT
```
public static final String DRUID_AUTHENTICATION_RESULT
```
    HTTP attribute that holds an AuthenticationResult, with info about a successful authentication check.
    
    See Also:
    
    Constant Field Values
  - DRUID_AUTHORIZATION_CHECKED
```
public static final String DRUID_AUTHORIZATION_CHECKED
```
    HTTP attribute set when a static method in AuthorizationUtils performs an authorization check on the request.
    
    See Also:
    
    Constant Field Values
  - DRUID_ALLOW_UNSECURED_PATH
```
public static final String DRUID_ALLOW_UNSECURED_PATH
```
    See Also:
    
    Constant Field Values
  - ALLOW_ALL_NAME
```
public static final String ALLOW_ALL_NAME
```
    See Also:
    
    Constant Field Values
  - ANONYMOUS_NAME
```
public static final String ANONYMOUS_NAME
```
    See Also:
    
    Constant Field Values
  - TRUSTED_DOMAIN_NAME
```
public static final String TRUSTED_DOMAIN_NAME
```
    See Also:
    
    Constant Field Values
  - ALLOWED_CONTEXT_KEYS
```
public static final Set<String> ALLOWED_CONTEXT_KEYS
```
    Set of context keys which are always permissible because something in the Druid code itself sets the key before the security check.
- Constructor Detail
  - AuthConfig
```
public AuthConfig()
```
  - AuthConfig
```
public AuthConfig(List<String> authenticatorChain,
                  List<String> authorizers,
                  List<String> unsecuredPaths,
                  boolean allowUnauthenticatedHttpOptions,
                  boolean authorizeQueryContextParams,
                  Set<String> unsecuredContextKeys,
                  Set<String> securedContextKeys,
                  boolean enableInputSourceSecurity)
```
- Method Detail
  - getAuthenticatorChain
```
public List<String> getAuthenticatorChain()
```
  - getAuthorizers
```
public List<String> getAuthorizers()
```
  - getUnsecuredPaths
```
public List<String> getUnsecuredPaths()
```
  - isAllowUnauthenticatedHttpOptions
```
public boolean isAllowUnauthenticatedHttpOptions()
```
  - authorizeQueryContextParams
```
public boolean authorizeQueryContextParams()
```
  - isEnableInputSourceSecurity
```
public boolean isEnableInputSourceSecurity()
```
  - contextKeysToAuthorize
```
public Set<String> contextKeysToAuthorize(Set<String> userKeys)
```
    Filter the user-supplied context keys based on the context key security rules. If context key security is disabled, then allow all keys. Else, apply the three key lists defined here.
    
    Allow Druid-defined keys.
    
    Allow anything not in the secured context key list.
    
    Allow anything in the config-defined unsecured key list.
    
    In the typical case, a site defines either the secured key list (to handle a few keys that are are not allowed) or the unsecured key list (to enumerate a few that are allowed.) If both lists are given, think of the secured list as exceptions to the unsecured key list.
    Returns:
    
    the list of secured keys to check via authentication
  - equals
```
public boolean equals(Object o)
```
    Overrides:
    
    equals in class Object
  - hashCode
```
public int hashCode()
```
    Overrides:
    
    hashCode in class Object
  - toString
```
public String toString()
```
    Overrides:
    
    toString in class Object
  - newBuilder
```
public static AuthConfig.Builder newBuilder()
```

Class AuthConfig

Nested Class Summary

Field Summary

Constructor Summary

Method Summary

Methods inherited from class java.lang.Object

Field Detail

DRUID_AUTHENTICATION_RESULT

DRUID_AUTHORIZATION_CHECKED

DRUID_ALLOW_UNSECURED_PATH

ALLOW_ALL_NAME

ANONYMOUS_NAME

TRUSTED_DOMAIN_NAME

ALLOWED_CONTEXT_KEYS

Constructor Detail

AuthConfig

AuthConfig

Method Detail

getAuthenticatorChain

getAuthorizers

getUnsecuredPaths

isAllowUnauthenticatedHttpOptions

authorizeQueryContextParams

isEnableInputSourceSecurity

contextKeysToAuthorize

equals

hashCode

toString

newBuilder