Module org.glassfish.soteria

Package org.glassfish.soteria.mechanisms.jaspic

Class HttpBridgeServerAuthModule

java.lang.Object

org.glassfish.soteria.mechanisms.jaspic.HttpBridgeServerAuthModule

All Implemented Interfaces:

jakarta.security.auth.message.module.ServerAuthModule, jakarta.security.auth.message.ServerAuth

public class HttpBridgeServerAuthModule
extends Object
implements jakarta.security.auth.message.module.ServerAuthModule

Author:

Arjan Tijms

Constructor Summary

Constructors

Constructor	Description
HttpBridgeServerAuthModule(CDIPerRequestInitializer cdiPerRequestInitializer)

Method Summary

Modifier and Type	Method	Description
void	cleanSubject(jakarta.security.auth.message.MessageInfo messageInfo, Subject subject)	Called in response to a HttpServletRequest.logout() call.
Class<?>[]	getSupportedMessageTypes()	A Servlet Container Profile compliant implementation should return HttpServletRequest and HttpServletResponse, so the delegation class ServerAuthContext can choose the right SAM to delegate to.
void	initialize(jakarta.security.auth.message.MessagePolicy requestPolicy, jakarta.security.auth.message.MessagePolicy responsePolicy, CallbackHandler handler, Map options)
jakarta.security.auth.message.AuthStatus	secureResponse(jakarta.security.auth.message.MessageInfo messageInfo, Subject serviceSubject)
jakarta.security.auth.message.AuthStatus	validateRequest(jakarta.security.auth.message.MessageInfo messageInfo, Subject clientSubject, Subject serviceSubject)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HttpBridgeServerAuthModule

public HttpBridgeServerAuthModule(CDIPerRequestInitializer cdiPerRequestInitializer)

Method Detail

initialize

public void initialize(jakarta.security.auth.message.MessagePolicy requestPolicy,
                       jakarta.security.auth.message.MessagePolicy responsePolicy,
                       CallbackHandler handler,
                       Map options)
                throws jakarta.security.auth.message.AuthException

Specified by:

initialize in interface jakarta.security.auth.message.module.ServerAuthModule

Throws:

jakarta.security.auth.message.AuthException

getSupportedMessageTypes

public Class<?>[] getSupportedMessageTypes()

A Servlet Container Profile compliant implementation should return HttpServletRequest and HttpServletResponse, so the delegation class ServerAuthContext can choose the right SAM to delegate to.

Specified by:

getSupportedMessageTypes in interface jakarta.security.auth.message.module.ServerAuthModule

validateRequest

public jakarta.security.auth.message.AuthStatus validateRequest(jakarta.security.auth.message.MessageInfo messageInfo,
                                                                Subject clientSubject,
                                                                Subject serviceSubject)
                                                         throws jakarta.security.auth.message.AuthException

Specified by:

validateRequest in interface jakarta.security.auth.message.ServerAuth

Throws:

jakarta.security.auth.message.AuthException

secureResponse

public jakarta.security.auth.message.AuthStatus secureResponse(jakarta.security.auth.message.MessageInfo messageInfo,
                                                               Subject serviceSubject)
                                                        throws jakarta.security.auth.message.AuthException

Specified by:

secureResponse in interface jakarta.security.auth.message.ServerAuth

Throws:

jakarta.security.auth.message.AuthException

cleanSubject

public void cleanSubject(jakarta.security.auth.message.MessageInfo messageInfo,
                         Subject subject)
                  throws jakarta.security.auth.message.AuthException

Called in response to a HttpServletRequest.logout() call.

Specified by:

cleanSubject in interface jakarta.security.auth.message.ServerAuth

Throws:

jakarta.security.auth.message.AuthException