All Classes

Class	Description
AbstractAccessControlList	Abstract base implementation of the JackrabbitAccessControlList interface.
AbstractAccessControlManager	Default implementation of the JackrabbitAccessControlManager interface.
AbstractAuthorizableAction	Abstract implementation of the AuthorizableAction interface that doesn't perform any action.
AbstractCredentials
AbstractGroupAction	Abstract implementation of the GroupAction interface that doesn't perform any action.
AbstractLoginModule	Abstract implementation of the LoginModule interface that can act as base class for login modules that aim to authenticate subjects against information stored in the content repository.
AbstractRestrictionProvider
AccessControlAction	The AccessControlAction allows to setup permissions upon creation of a new authorizable; namely the privileges the new authorizable should be granted on it's own 'home directory' being represented by the new node associated with that new authorizable.
AccessControlConstants	Constants for the default access control management implementation and and for built-in access control related node types.
ACE	Default implementation of the JackrabbitAccessControlEntry interface.
AdminPrincipal	Principal used to mark an administrator.
AggregatedPermissionProvider	Extension of the PermissionProvider interface that allows it to be used in combination with other provider implementations.
AggregationAware	Marker interface intended to extend a RestrictionProvider to make it aware of it's aggregated nature in a composite when it comes to evaluate the validity of restrictions.
AggregationFilter
Authentication	The Authentication interface defines methods to validate Credentials during the login step of the authentication process.
AuthenticationConfiguration	Interface for the authentication setup.
AuthInfoImpl	Default implementation of the AuthInfo interface.
AuthorizableAction	The AuthorizableAction interface provide an implementation specific way to execute additional validation or write tasks upon User creation, Group creation, Authorizable removal and User password modification.
AuthorizableActionProvider	AuthorizableActionProvider is used to provide AuthorizableActions for each instance of UserManager.
AuthorizableNodeName	The AuthorizableNodeName is in charge of generating a valid node name from a given authorizable ID.
AuthorizableNodeName.Default	Default implementation of the AuthorizableNodeName interface that uses the specified authorizable identifier as node name escaping any illegal JCR chars.
AuthorizableType	The different authorizable types.
AuthorizationConfiguration	Configuration for access control management and permission evaluation.
CacheConstants	Constants for persisted user management related caches.
CachedMembershipReader	Interface for reading the membership information of a given authorizable and store the result in a cache.
CacheLoader	Responsible for providing the set of principals for a given user.
CachePrincipalFactory	Factory for creating Principal instances based on the principal name.
ClearMembershipAction	Authorizable action attempting to clear all group membership before removing the specified authorizable.
CompositeActionProvider	Aggregates a collection of AuthorizableActionProviders into a single provider.
CompositeConfiguration<T extends SecurityConfiguration>	Abstract base implementation for SecurityConfigurations that can combine different implementations.
CompositeCredentialsSupport	Composite implementation of the CredentialsSupport interface that handles multiple providers.
CompositePattern	Aggregates of a list of RestrictionPatterns into a single pattern.
CompositePrincipalConfiguration	PrincipalConfiguration that combines different principal provider implementations that share a common principal manager implementation.
CompositePrincipalProvider	PrincipalProvider implementation that aggregates a list of principal providers into a single.
CompositeRestrictionProvider	Aggregates of a collection of RestrictionProvider implementations into a single provider.
CompositeTokenConfiguration	TokenConfiguration that combines different token provider implementations.
CompositeTokenProvider	Aggregates a collection of TokenProviders into a single provider.
ConfigurationBase	Abstract base implementation for the various security configurations.
ConfigurationParameters	ConfigurationParameters is a convenience class that allows typed access to configuration properties.
ConfigurationParameters.Milliseconds	Helper class for configuration parameters that denote a "duration", such as a timeout or expiration time.
ConfigurationUtil	Utility to create Configurations for built-in LoginModule implementations.
Context	Context represents item related information in relation to a dedicated SecurityConfiguration.
Context.Default	Default implementation of the Context interface that always returns false.
CredentialsCallback	Callback implementation to retrieve Credentials.
CredentialsSupport	Simple helper interface that allows to easily plug support for additional or custom Credentials implementations during authentication.
DefaultAuthorizableActionProvider	Default implementation of the AuthorizableActionProvider interface that allows to config all actions provided by the OAK.
DynamicMembershipProvider
DynamicMembershipService
EmptyPermissionProvider	Permission provider implementation that does not grant any permissions.
EmptyPrincipalProvider	Implementation of the PrincipalProvider interface that never returns any principals.
EveryonePrincipal	Built-in principal group that has every other principal as member.
GroupAction	The GroupAction interface allows for implementations to be informed about and react to the following changes to a Group's members: GroupAction.onMemberAdded(Group, Authorizable, Root, NamePathMapper) GroupAction.onMembersAdded(Group, Iterable, Iterable, Root, NamePathMapper) GroupAction.onMembersAddedContentId(Group, Iterable, Iterable, Root, NamePathMapper) GroupAction.onMemberRemoved(Group, Authorizable, Root, NamePathMapper) GroupAction.onMembersRemoved(Group, Iterable, Iterable, Root, NamePathMapper)
GroupPrincipals	Helper class to deal with the migration between the 2 types of groups
GuestLoginModule	The GuestLoginModule is intended to provide backwards compatibility with the login handling present in the JCR reference implementation located in jackrabbit-core.
ImmutableACL	An implementation of the JackrabbitAccessControlList interface that only allows for reading.
ImmutablePrivilegeDefinition	Default implementation of the PrivilegeDefinition interface.
ImpersonationCredentials	Implementation of the JCR Credentials interface used to distinguish a regular login request from Session.impersonate(javax.jcr.Credentials).
ImportBehavior	Utility class defining specific, configurable import behavior.
Importer	Content importer.
JaasLoginContext	Bridge class that connects the JAAS LoginContext class with the LoginContext interface used by Oak.
JcrAllUtil
LoginContext	Interface version of the JAAS LoginContext class.
LoginContextProvider	Configurable provider taking care of building login contexts for the desired authentication mechanism.
LoginModuleMBean
LoginModuleMonitor
LoginModuleStats	Deprecated. Since Oak 1.40.0.
LoginModuleStatsCollector	Deprecated. Since Oak 1.38.0 in favor of SecurityConfiguration.getMonitors(StatisticsProvider)
NodeInfo	Information about a node being imported.
OpenAuthenticationConfiguration	This implementation of the authentication configuration provides login contexts that accept any credentials and doesn't validate specified workspace name.
OpenAuthorizationConfiguration	This class implements an AuthorizationConfiguration which grants full access to any Subject.
OpenPermissionProvider	Permission provider implementation that grants full access everywhere.
OpenSecurityProvider	Rudimentary SecurityProvider implementation that allow every subject to authenticate and grants it full access everywhere.
PasswordChangeAction	PasswordChangeAction asserts that the upon PasswordChangeAction.onPasswordChange(org.apache.jackrabbit.api.security.user.User, String, org.apache.jackrabbit.oak.api.Root, org.apache.jackrabbit.oak.namepath.NamePathMapper) a different, non-null password is specified.
PasswordUtil	Utility to generate and compare password hashes.
PasswordValidationAction	PasswordValidationAction provides a simple password validation mechanism with the following configurable option: constraint: a regular expression that can be compiled to a Pattern defining validation rules for a password.
PermissionAware	Interface indicating that a given object (like e.g.
PermissionConstants	Implementation specific constants related to permission evaluation.
PermissionProvider	Main entry point for permission evaluation in Oak.
Permissions	Provides constants for permissions used in the OAK access evaluation as well as permission related utility methods.
PolicyOwner	Interface to improve pluggability of the AccessControlManager, namely the interaction of multiple managers within a single repository.
PreAuthContext	LoginContext for pre-authenticated subjects that don't require further validation nor additional login/logout steps.
PreAuthenticatedLogin	PreAuthenticatedLogin is used as marker in the shared map of the login context.
PrincipalConfiguration	Configuration interface for principal management.
PrincipalImpl	Default implementation of the JackrabbitPrincipal interface.
PrincipalIteratorAdapter	Principal specific RangeIteratorAdapter implementing the PrincipalIterator interface.
PrincipalManagerImpl	Default implementation of the PrincipalManager interface.
PrincipalProvider	The PrincipalProvider defines methods to provide access to sources of Principals.
PrincipalProviderCallback	Callback implementation used to pass a PrincipalProvider to the login module.
PrincipalQueryManager	Extension for the PrincipalManager that offers range search.
PrivilegeBits	Internal representation of JCR privileges.
PrivilegeBitsProvider	Allows to obtain the internal representation of privileges (or their names) and to covert the internal representation back to privilege names.
PrivilegeConfiguration	Interface for the privilege management configuration.
PrivilegeConstants	Internal name constants used for the privilege management.
PrivilegeDefinition	The PrivilegeDefinition interface defines the characteristics of a JCR Privilege.
PrivilegeUtil	Privilege management related utility methods.
PropInfo	Information about a property being imported.
PropInfo.MultipleStatus	Hint indicating whether the property is multi- or single-value
ProtectedItemImporter	Base interface for ProtectedNodeImporter and ProtectedPropertyImporter.
ProtectedNodeImporter	ProtectedNodeImporter provides means to import protected Nodes and the subtree defined below such nodes.
ProtectedPropertyImporter	ProtectedPropertyImporter is in charge of importing single properties with a protected PropertyDefinition.
ReadOnly	Marker interface to indicate if a Tree or Root can only be read (write operations not implemented).
ReadPolicy
ReferenceChangeTracker	Helper class used to keep track of uuid mappings (e.g.
RegistrationConstants	Holds the names of well-known registration properties for security-related components
RepositoryCallback	Callback implementation used to access the repository.
RepositoryPermission	The RepositoryPermission allows to evaluate permissions that have been defined on the repository level and which consequently are not bound to a particular item.
Restriction	A Restriction object represents a "live" restriction object that has been created using the Jackrabbit specific extensions of the AccessControlEntry interface.
RestrictionDefinition	The RestrictionDefinition interface provides methods for discovering the static definition of any additional policy-internal refinements of the access control definitions.
RestrictionDefinitionImpl	Default implementation of the RestrictionDefinition interface.
RestrictionImpl	RestrictionImpl
RestrictionPattern	Interface used to verify if a given restriction applies to a given item or path.
RestrictionProvider	Interface to manage the supported restrictions present with a given access control and permission management implementation.
RootProvider
SecurityConfiguration	Base interface for all security related configurations.
SecurityConfiguration.Default	Default implementation that provides empty initializers, validators, commit hooks and parameters.
SecurityProvider	Main entry point for security related plugins to an Oak repository.
SecurityProviderCallback	Callback implementation to set and get the SecurityProvider.
SimpleCredentialsSupport	Implementation of the CredentialsSupport interface that handles SimpleCredentials.
SystemPrincipal	Principal to mark an system internal subject.
SystemSubject	Internal utility providing access to a system internal subject instance.
SystemUserPrincipal	Principal used to mark a system user.
TextValue	TextValue represents a serialized property value read from a System or Document View XML document.
TokenConfiguration	Configuration for token management.
TokenConstants
TokenCredentialsExpiredException	Subclass of CredentialException indicating that the token credentials used for repository login have expired.
TokenInfo	The TokenInfo provides data associated with a login token and basic methods to verify the validity of token credentials at given point in time.
TokenProvider	Interface to manage create and manage login tokens.
TokenProviderCallback	Callback implementation to set and retrieve a login token provider.
TreeAware	Oak internal utility interface to avoid repeated retrieval of an underlying Tree.
TreeConstants
TreeContext	TreeContext represents item related information in relation to a dedicated module.
TreeLocation	A TreeLocation denotes a location inside a tree.
TreePermission	The TreePermission allow to evaluate permissions defined for a given Tree and it's properties.
TreeProvider
TreeType	Allows to distinguish different types of trees based on their name, ancestry or primary type.
TreeTypeAware
TreeTypeProvider
TreeUtil	Utility providing common operations for the Tree that are not provided by the API.
UserAction	The UserAction interface allows for implementations to be informed about and react to the following changes to a User: UserAction.onDisable(User, String, Root, NamePathMapper)
UserAuthenticationFactory	Provides a user management specific implementation of the Authentication interface to those LoginModules that verify a given authentication request by evaluation information exposed by the Jackrabbit user management API.
UserConfiguration	Configuration interface for user management.
UserConstants	User management related constants.
UserIdCredentials	Credentials implementation that only contains a userId but no password.
UserManagerCallback	Callback implementation used to pass a UserManager to the login module.
UserUtil	Utility methods for user management.
WhiteboardCallback	Callback implementation to set and retrieve the Whiteboard.