Module org.eclipse.jetty.security.openid

Package org.eclipse.jetty.security.openid

Class OpenIdAuthenticator

java.lang.Object

org.eclipse.jetty.security.authentication.LoginAuthenticator

org.eclipse.jetty.security.openid.OpenIdAuthenticator

All Implemented Interfaces:

org.eclipse.jetty.security.Authenticator

public class OpenIdAuthenticator
extends org.eclipse.jetty.security.authentication.LoginAuthenticator

Implements authentication using OpenId Connect on top of OAuth 2.0.

The OpenIdAuthenticator redirects unauthenticated requests to the OpenID Connect Provider. The End-User is eventually redirected back with an Authorization Code to the path set by setRedirectPath(String) within the context. The Authorization Code is then used to authenticate the user through the OpenIdCredentials and OpenIdLoginService.

Once a user is authenticated the OpenID Claims can be retrieved through an attribute on the session with the key CLAIMS. The full response containing the OAuth 2.0 Access Token can be obtained with the session attribute RESPONSE.

SessionAuthentication is then used to wrap Authentication results so that they are associated with the session.

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator

org.eclipse.jetty.security.authentication.LoginAuthenticator.LoggedOutAuthentication, org.eclipse.jetty.security.authentication.LoginAuthenticator.UserAuthenticationSent, org.eclipse.jetty.security.authentication.LoginAuthenticator.UserAuthenticationSucceeded

Nested classes/interfaces inherited from interface org.eclipse.jetty.security.Authenticator

org.eclipse.jetty.security.Authenticator.Configuration, org.eclipse.jetty.security.Authenticator.Factory, org.eclipse.jetty.security.Authenticator.NoOp

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CLAIMS
static final String	CSRF_TOKEN	Deprecated.
static final String	ERROR_PAGE
static final String	ERROR_PARAMETER
static final String	ISSUER
static final String	J_METHOD
static final String	J_POST
static final String	J_SECURITY_CHECK
static final String	J_URI
static final String	LOGOUT_REDIRECT_PATH
static final String	REDIRECT_PATH
static final String	RESPONSE

Fields inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator

_identityService, _loginService

Fields inherited from interface org.eclipse.jetty.security.Authenticator

BASIC_AUTH, CERT_AUTH, CERT_AUTH2, DIGEST_AUTH, FORM_AUTH, NEGOTIATE_AUTH, OPENID_AUTH, SPNEGO_AUTH

Constructor Summary

Constructors

Constructor	Description
OpenIdAuthenticator()
OpenIdAuthenticator(OpenIdConfiguration configuration)
OpenIdAuthenticator(OpenIdConfiguration configuration, String errorPage)
OpenIdAuthenticator(OpenIdConfiguration configuration, String redirectPath, String errorPage)
OpenIdAuthenticator(OpenIdConfiguration configuration, String redirectPath, String errorPage, String logoutRedirectPath)

Method Summary

Modifier and Type	Method	Description
String	getAuthenticationType()
protected String	getChallengeUri(org.eclipse.jetty.server.Request request)
org.eclipse.jetty.security.Constraint.Authorization	getConstraintAuthentication(String pathInContext, org.eclipse.jetty.security.Constraint.Authorization existing, Function<Boolean,org.eclipse.jetty.server.Session> getSession)
protected org.eclipse.jetty.util.Fields	getParameters(org.eclipse.jetty.server.Request request)
boolean	isAlwaysSaveUri()	Deprecated.
boolean	isErrorPage(String pathInContext)
boolean	isJSecurityCheck(String uri)
org.eclipse.jetty.security.UserIdentity	login(String username, Object credentials, org.eclipse.jetty.server.Request request, org.eclipse.jetty.server.Response response)
void	logout(org.eclipse.jetty.server.Request request, org.eclipse.jetty.server.Response response)
org.eclipse.jetty.server.Request	prepareRequest(org.eclipse.jetty.server.Request request, org.eclipse.jetty.security.AuthenticationState authenticationState)
void	setAlwaysSaveUri(boolean alwaysSave)	Deprecated.
void	setConfiguration(org.eclipse.jetty.security.Authenticator.Configuration authConfig)
void	setErrorPage(String path)
void	setLogoutRedirectPath(String logoutRedirectPath)
void	setRedirectPath(String redirectPath)
org.eclipse.jetty.security.AuthenticationState	validateRequest(org.eclipse.jetty.server.Request request, org.eclipse.jetty.server.Response response, org.eclipse.jetty.util.Callback cb)

Methods inherited from class org.eclipse.jetty.security.authentication.LoginAuthenticator

getLoginService, updateSession

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CLAIMS

public static final String CLAIMS

See Also:

• Constant Field Values

RESPONSE

public static final String RESPONSE

See Also:

• Constant Field Values

ISSUER

public static final String ISSUER

See Also:

• Constant Field Values

REDIRECT_PATH

public static final String REDIRECT_PATH

See Also:

• Constant Field Values

LOGOUT_REDIRECT_PATH

public static final String LOGOUT_REDIRECT_PATH

See Also:

• Constant Field Values

ERROR_PAGE

public static final String ERROR_PAGE

See Also:

• Constant Field Values

J_URI

public static final String J_URI

See Also:

• Constant Field Values

J_POST

public static final String J_POST

See Also:

• Constant Field Values

J_METHOD

public static final String J_METHOD

See Also:

• Constant Field Values

J_SECURITY_CHECK

public static final String J_SECURITY_CHECK

See Also:

• Constant Field Values

ERROR_PARAMETER

public static final String ERROR_PARAMETER

See Also:

• Constant Field Values

CSRF_TOKEN

@Deprecated
public static final String CSRF_TOKEN

Deprecated.

See Also:

• Constant Field Values

Constructor Details

OpenIdAuthenticator

public OpenIdAuthenticator()

OpenIdAuthenticator

public OpenIdAuthenticator(OpenIdConfiguration configuration)

OpenIdAuthenticator

public OpenIdAuthenticator(OpenIdConfiguration configuration,
 String errorPage)

OpenIdAuthenticator

public OpenIdAuthenticator(OpenIdConfiguration configuration,
 String redirectPath,
 String errorPage)

OpenIdAuthenticator

public OpenIdAuthenticator(OpenIdConfiguration configuration,
 String redirectPath,
 String errorPage,
 String logoutRedirectPath)

Method Details

setConfiguration

public void setConfiguration(org.eclipse.jetty.security.Authenticator.Configuration authConfig)

Specified by:

setConfiguration in interface org.eclipse.jetty.security.Authenticator

Overrides:

setConfiguration in class org.eclipse.jetty.security.authentication.LoginAuthenticator

getAuthenticationType

public String getAuthenticationType()

setAlwaysSaveUri

@Deprecated
public void setAlwaysSaveUri(boolean alwaysSave)

Deprecated.

isAlwaysSaveUri

@Deprecated
public boolean isAlwaysSaveUri()

Deprecated.

setRedirectPath

public void setRedirectPath(String redirectPath)

setLogoutRedirectPath

public void setLogoutRedirectPath(String logoutRedirectPath)

setErrorPage

public void setErrorPage(String path)

login

public org.eclipse.jetty.security.UserIdentity login(String username,
 Object credentials,
 org.eclipse.jetty.server.Request request,
 org.eclipse.jetty.server.Response response)

Overrides:

login in class org.eclipse.jetty.security.authentication.LoginAuthenticator

logout

public void logout(org.eclipse.jetty.server.Request request,
 org.eclipse.jetty.server.Response response)

Overrides:

logout in class org.eclipse.jetty.security.authentication.LoginAuthenticator

prepareRequest

public org.eclipse.jetty.server.Request prepareRequest(org.eclipse.jetty.server.Request request,
 org.eclipse.jetty.security.AuthenticationState authenticationState)

getParameters

protected org.eclipse.jetty.util.Fields getParameters(org.eclipse.jetty.server.Request request)

getConstraintAuthentication

public org.eclipse.jetty.security.Constraint.Authorization getConstraintAuthentication(String pathInContext,
 org.eclipse.jetty.security.Constraint.Authorization existing,
 Function<Boolean,org.eclipse.jetty.server.Session> getSession)

validateRequest

public org.eclipse.jetty.security.AuthenticationState validateRequest(org.eclipse.jetty.server.Request request,
 org.eclipse.jetty.server.Response response,
 org.eclipse.jetty.util.Callback cb)
                                                               throws org.eclipse.jetty.security.ServerAuthException

Throws:

org.eclipse.jetty.security.ServerAuthException

isJSecurityCheck

public boolean isJSecurityCheck(String uri)

isErrorPage

public boolean isErrorPage(String pathInContext)

getChallengeUri

protected String getChallengeUri(org.eclipse.jetty.server.Request request)