tachyon.security.login

Class AppLoginModule

java.lang.Object

tachyon.security.login.AppLoginModule

All Implemented Interfaces:

LoginModule

public final class AppLoginModule
extends Object
implements LoginModule

An app login module that creates a user based on the user name provided through application configuration. Specifically, through Java system property tachyon.security.login.username. This module is useful if multiple Tachyon clients running under same OS user name want to get different identifies (for resource and data management), or if Tachyon clients running under different OS user names want to get same identify.

Constructor Summary

Constructors

Constructor and Description
AppLoginModule()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	abort() Aborts the authentication (second phase).
boolean	commit() Commits the authentication (second phase).
void	initialize(Subject subject, CallbackHandler callbackHandler, Map<String,?> sharedState, Map<String,?> options)
boolean	login() Retrieves the user name by querying the property of Constants.SECURITY_LOGIN_USERNAME.
boolean	logout() Logs out the user

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AppLoginModule

public AppLoginModule()

Method Detail

initialize

public void initialize(Subject subject,
              CallbackHandler callbackHandler,
              Map<String,?> sharedState,
              Map<String,?> options)

Specified by:

initialize in interface LoginModule

login

public boolean login()
              throws LoginException

Retrieves the user name by querying the property of Constants.SECURITY_LOGIN_USERNAME.

Specified by:

login in interface LoginModule

Returns:

true if user name provided by application is set and not empty

Throws:

LoginException

abort

public boolean abort()
              throws LoginException

Aborts the authentication (second phase).

This method is called if the LoginContext's overall authentication failed. (login failed) It cleans up any state that was changed in the login and commit methods.

Specified by:

abort in interface LoginModule

Returns:

true in all cases

Throws:

LoginException

commit

public boolean commit()
               throws LoginException

Commits the authentication (second phase).

This method is called if the LoginContext's overall authentication succeeded. The implementation first checks if there is already Tachyon user in the subject. If not, it adds the previously logged in Tachyon user into the subject.

Specified by:

commit in interface LoginModule

Returns:

true if a Tachyon user if found or created

Throws:

LoginException - not Tachyon user is found or created

logout

public boolean logout()
               throws LoginException

Logs out the user

The implementation removes the User associated with the Subject.

Specified by:

logout in interface LoginModule

Returns:

true in all cases

Throws:

LoginException - if logout fails