Package | Description |
---|---|
org.acegisecurity |
Provides core Acegi Security System for Spring interfaces and classes.
|
org.acegisecurity.acl |
Enables retrieval of access control lists (ACLs) for domain object instances.
|
org.acegisecurity.acl.basic |
Access control list implementation based on integer bit masks.
|
org.acegisecurity.acls.sid |
Provides indirection between ACL packages and security identities, such as principals and GrantedAuthority[]s.
|
org.acegisecurity.adapters |
Allows external containers to obtain authentication information from the
system.
|
org.acegisecurity.afterinvocation |
Used for post-processing of an object returned from a secure object invocation.
|
org.acegisecurity.concurrent |
Concurrent session control and registration classes.
|
org.acegisecurity.context |
Provides a "request context".
|
org.acegisecurity.event.authentication |
Enables events to be published to the Spring application context.
|
org.acegisecurity.event.authorization |
Provides support objects for security event interception (ie authorization).
|
org.acegisecurity.intercept |
Actually enforces the security and ties the whole security system together.
|
org.acegisecurity.intercept.method |
Provides support objects for securing Java method invocations
via different AOP libraries.
|
org.acegisecurity.intercept.web |
Enforces security for HTTP requests, typically by the URL requested.
|
org.acegisecurity.providers |
Implements a provider-based approach to authentication decisions.
|
org.acegisecurity.providers.anonymous |
Allows you to secure every invocation (especially useful for web request
URI security) by always having either an actual principal or an anonymous
principal authenticated.
|
org.acegisecurity.providers.cas |
An authentication provider that can process JA-SIG Central Authentication Service (CAS)
service tickets and proxy tickets.
|
org.acegisecurity.providers.dao |
An authentication provider that relies upon a data access object.
|
org.acegisecurity.providers.jaas |
An authentication provider for JAAS.
|
org.acegisecurity.providers.jaas.event |
Enables JAAS events to be published to the Spring application context.
|
org.acegisecurity.providers.rcp |
Allows remote clients to authenticate and obtain a populated
Authentication object. |
org.acegisecurity.providers.rememberme |
Authentication provider that processes
RememberMeAuthenticationToken s. |
org.acegisecurity.providers.x509 |
An authentication provider that can process X.509 certificaties.
|
org.acegisecurity.runas |
Allows secure objects to be run under a different authentication identity.
|
org.acegisecurity.ui |
Authentication processing mechanisms, which respond to the submission of authentication
credentials using various protocols (eg BASIC, CAS, form login etc).
|
org.acegisecurity.ui.cas |
Authenticates standard web browser users via
JA-SIG Central Authentication Service (CAS).
|
org.acegisecurity.ui.logout | |
org.acegisecurity.ui.rememberme |
Support for remembering a user between different web sessions.
|
org.acegisecurity.ui.switchuser |
Provides HTTP-based "switch user" (su) capabilities.
|
org.acegisecurity.ui.webapp |
Authenticates users via HTTP properties, headers and session.
|
org.acegisecurity.ui.x509 |
X.509 authentication filter and related classes.
|
org.acegisecurity.vote |
Implements a vote-based approach to authorization decisions.
|
Modifier and Type | Method and Description |
---|---|
Authentication |
AbstractAuthenticationManager.authenticate(Authentication authRequest)
An implementation of the
authenticate method that calls the abstract method
doAuthenticatation to do its work. |
Authentication |
AuthenticationManager.authenticate(Authentication authentication)
Attempts to authenticate the passed
Authentication object, returning a fully populated
Authentication object (including granted authorities) if successful. |
Authentication |
RunAsManager.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Returns a replacement
Authentication object for the current secure object invocation, or
null if replacement not required. |
protected abstract Authentication |
AbstractAuthenticationManager.doAuthentication(Authentication authentication)
Concrete implementations of this class override this method to provide the authentication service.
|
Authentication |
MockAuthenticationManager.doAuthentication(Authentication authentication) |
Authentication |
AuthenticationException.getAuthentication()
The authentication request which this exception corresponds to (may be
null ) |
Modifier and Type | Method and Description |
---|---|
Authentication |
AbstractAuthenticationManager.authenticate(Authentication authRequest)
An implementation of the
authenticate method that calls the abstract method
doAuthenticatation to do its work. |
Authentication |
AuthenticationManager.authenticate(Authentication authentication)
Attempts to authenticate the passed
Authentication object, returning a fully populated
Authentication object (including granted authorities) if successful. |
Authentication |
RunAsManager.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Returns a replacement
Authentication object for the current secure object invocation, or
null if replacement not required. |
void |
AccessDecisionManager.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Resolves an access control decision for the passed parameters.
|
Object |
AfterInvocationManager.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject)
Given the details of a secure object invocation including its returned
Object , make an
access control decision or optionally modify the returned Object . |
protected abstract Authentication |
AbstractAuthenticationManager.doAuthentication(Authentication authentication)
Concrete implementations of this class override this method to provide the authentication service.
|
Authentication |
MockAuthenticationManager.doAuthentication(Authentication authentication) |
boolean |
AuthenticationTrustResolver.isAnonymous(Authentication authentication)
Indicates whether the passed
Authentication token represents an anonymous user. |
boolean |
AuthenticationTrustResolverImpl.isAnonymous(Authentication authentication) |
boolean |
AuthenticationTrustResolver.isRememberMe(Authentication authentication)
Indicates whether the passed
Authentication token represents user that has been remembered
(ie not a user that has been fully authenticated). |
boolean |
AuthenticationTrustResolverImpl.isRememberMe(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
AclEntry[] |
AclProviderManager.getAcls(Object domainInstance,
Authentication authentication) |
AclEntry[] |
AclManager.getAcls(Object domainInstance,
Authentication authentication)
Obtains the ACLs that apply to the specified domain instance, but only including those ACLs which have
been granted to the presented
Authentication object |
AclEntry[] |
AclProvider.getAcls(Object domainInstance,
Authentication authentication)
Obtains the ACLs that apply to the specified domain instance and presented
Authentication
object. |
Modifier and Type | Method and Description |
---|---|
AclEntry[] |
BasicAclProvider.getAcls(Object domainInstance,
Authentication authentication) |
AclEntry[] |
EffectiveAclsResolver.resolveEffectiveAcls(AclEntry[] allAcls,
Authentication filteredBy)
Determines the ACLs that apply to the presented
Authentication object. |
AclEntry[] |
GrantedAuthorityEffectiveAclsResolver.resolveEffectiveAcls(AclEntry[] allAcls,
Authentication filteredBy) |
Modifier and Type | Method and Description |
---|---|
Sid[] |
SidRetrievalStrategyImpl.getSids(Authentication authentication) |
Sid[] |
SidRetrievalStrategy.getSids(Authentication authentication) |
Constructor and Description |
---|
PrincipalSid(Authentication authentication) |
Modifier and Type | Interface and Description |
---|---|
interface |
AuthByAdapter
Indicates a specialized, immutable, server-side only
Authentication
class. |
Modifier and Type | Class and Description |
---|---|
class |
AbstractAdapterAuthenticationToken
Convenience superclass for
AuthByAdapter implementations. |
class |
PrincipalAcegiUserToken
A
Principal compatible Authentication object. |
Modifier and Type | Method and Description |
---|---|
Authentication |
AuthByAdapterProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
AuthByAdapterProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Object |
AfterInvocationProviderManager.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
Object |
AfterInvocationProvider.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
Object |
BasicAclEntryAfterInvocationCollectionFilteringProvider.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
Object |
BasicAclEntryAfterInvocationProvider.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
Object |
AclEntryAfterInvocationCollectionFilteringProvider.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
Object |
AclEntryAfterInvocationProvider.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config,
Object returnedObject) |
protected boolean |
AbstractAclProvider.hasPermission(Authentication authentication,
Object domainObject) |
Modifier and Type | Method and Description |
---|---|
void |
ConcurrentSessionController.checkAuthenticationAllowed(Authentication request)
Called by any class that wishes to know whether the current authentication request should be permitted.
|
void |
ConcurrentSessionControllerImpl.checkAuthenticationAllowed(Authentication request) |
void |
NullConcurrentSessionController.checkAuthenticationAllowed(Authentication request) |
protected int |
ConcurrentSessionControllerImpl.getMaximumSessionsForThisUser(Authentication authentication)
Method intended for use by subclasses to override the maximum number of sessions that are permitted for
a particular authentication.
|
static Object |
SessionRegistryUtils.obtainPrincipalFromAuthentication(Authentication auth) |
static String |
SessionRegistryUtils.obtainSessionIdFromAuthentication(Authentication auth) |
void |
ConcurrentSessionController.registerSuccessfulAuthentication(Authentication authentication)
Called by an
AuthenticationManager when the authentication was successful. |
void |
ConcurrentSessionControllerImpl.registerSuccessfulAuthentication(Authentication authentication) |
void |
NullConcurrentSessionController.registerSuccessfulAuthentication(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
SecurityContextImpl.getAuthentication() |
Authentication |
SecurityContext.getAuthentication()
Obtains the currently authenticated principal, or an authentication request token.
|
Modifier and Type | Method and Description |
---|---|
void |
SecurityContextImpl.setAuthentication(Authentication authentication) |
void |
SecurityContext.setAuthentication(Authentication authentication)
Changes the currently authenticated principal, or removes the authentication information.
|
Modifier and Type | Method and Description |
---|---|
Authentication |
AbstractAuthenticationEvent.getAuthentication()
Getters for the
Authentication request that caused the event. |
Modifier and Type | Method and Description |
---|---|
Authentication |
AuthorizedEvent.getAuthentication() |
Authentication |
AuthorizationFailureEvent.getAuthentication() |
Constructor and Description |
---|
AuthorizationFailureEvent(Object secureObject,
ConfigAttributeDefinition configAttribs,
Authentication authentication,
AccessDeniedException accessDeniedException)
Construct the event.
|
AuthorizedEvent(Object secureObject,
ConfigAttributeDefinition configAttribs,
Authentication authentication)
Construct the event.
|
Modifier and Type | Method and Description |
---|---|
Authentication |
InterceptorStatusToken.getAuthentication() |
Constructor and Description |
---|
InterceptorStatusToken(Authentication authentication,
boolean contextHolderRefreshRequired,
ConfigAttributeDefinition attr,
Object secureObject) |
Modifier and Type | Method and Description |
---|---|
boolean |
MethodInvocationPrivilegeEvaluator.isAllowed(org.aopalliance.intercept.MethodInvocation mi,
Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
boolean |
WebInvocationPrivilegeEvaluator.isAllowed(FilterInvocation fi,
Authentication authentication) |
Modifier and Type | Class and Description |
---|---|
class |
AbstractAuthenticationToken
Base class for
Authentication objects. |
class |
TestingAuthenticationToken
An
Authentication implementation that is designed for use whilst unit testing. |
class |
UsernamePasswordAuthenticationToken
An
Authentication implementation that is designed for simple presentation of a
username and password. |
Modifier and Type | Method and Description |
---|---|
Authentication |
TestingAuthenticationProvider.authenticate(Authentication authentication) |
Authentication |
AuthenticationProvider.authenticate(Authentication authentication)
Performs authentication with the same contract as
AuthenticationManager.authenticate(Authentication) . |
Authentication |
ProviderManager.doAuthentication(Authentication authentication)
Attempts to authenticate the passed
Authentication object. |
Modifier and Type | Method and Description |
---|---|
Authentication |
TestingAuthenticationProvider.authenticate(Authentication authentication) |
Authentication |
AuthenticationProvider.authenticate(Authentication authentication)
Performs authentication with the same contract as
AuthenticationManager.authenticate(Authentication) . |
Authentication |
ProviderManager.doAuthentication(Authentication authentication)
Attempts to authenticate the passed
Authentication object. |
Modifier and Type | Class and Description |
---|---|
class |
AnonymousAuthenticationToken
Represents an anonymous
Authentication . |
Modifier and Type | Method and Description |
---|---|
Authentication |
AnonymousAuthenticationProvider.authenticate(Authentication authentication) |
protected Authentication |
AnonymousProcessingFilter.createAuthentication(javax.servlet.ServletRequest request) |
Modifier and Type | Method and Description |
---|---|
Authentication |
AnonymousAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Class and Description |
---|---|
class |
CasAuthenticationToken
Represents a successful CAS
Authentication . |
Modifier and Type | Method and Description |
---|---|
Authentication |
CasAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
CasAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
AbstractUserDetailsAuthenticationProvider.authenticate(Authentication authentication) |
protected Authentication |
AbstractUserDetailsAuthenticationProvider.createSuccessAuthentication(Object principal,
Authentication authentication,
UserDetails user)
Creates a successful
Authentication object. |
Modifier and Type | Method and Description |
---|---|
Authentication |
AbstractUserDetailsAuthenticationProvider.authenticate(Authentication authentication) |
protected Authentication |
AbstractUserDetailsAuthenticationProvider.createSuccessAuthentication(Object principal,
Authentication authentication,
UserDetails user)
Creates a successful
Authentication object. |
Modifier and Type | Class and Description |
---|---|
class |
JaasAuthenticationToken
UsernamePasswordAuthenticationToken extension to carry the Jaas LoginContext that the user was logged into
|
Modifier and Type | Method and Description |
---|---|
Authentication |
JaasAuthenticationProvider.authenticate(Authentication auth)
Attempts to login the user given the Authentication objects principal and credential
|
Modifier and Type | Method and Description |
---|---|
Authentication |
JaasAuthenticationProvider.authenticate(Authentication auth)
Attempts to login the user given the Authentication objects principal and credential
|
void |
JaasPasswordCallbackHandler.handle(Callback callback,
Authentication auth)
If the callback passed to the 'handle' method is an instance of PasswordCallback, the
JaasPasswordCallbackHandler will call, callback.setPassword(authentication.getCredentials().toString()).
|
void |
JaasAuthenticationCallbackHandler.handle(Callback callback,
Authentication auth)
Handle the Callback.
|
void |
JaasNameCallbackHandler.handle(Callback callback,
Authentication authentication)
If the callback passed to the 'handle' method is an instance of NameCallback, the
JaasNameCallbackHandler will call, callback.setName(authentication.getPrincipal().toString()).
|
Modifier and Type | Method and Description |
---|---|
Authentication |
JaasAuthenticationEvent.getAuthentication()
Pre-casted method that returns the 'source' of the event.
|
Constructor and Description |
---|
JaasAuthenticationEvent(Authentication auth)
The Authentication object is stored as the ApplicationEvent 'source'.
|
JaasAuthenticationFailedEvent(Authentication auth,
Exception exception) |
JaasAuthenticationSuccessEvent(Authentication auth) |
Modifier and Type | Method and Description |
---|---|
Authentication |
RemoteAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
RemoteAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Class and Description |
---|---|
class |
RememberMeAuthenticationToken
Represents a remembered
Authentication . |
Modifier and Type | Method and Description |
---|---|
Authentication |
RememberMeAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Method and Description |
---|---|
Authentication |
RememberMeAuthenticationProvider.authenticate(Authentication authentication) |
Modifier and Type | Class and Description |
---|---|
class |
X509AuthenticationToken
Authentication implementation for X.509 client-certificate authentication. |
Modifier and Type | Method and Description |
---|---|
Authentication |
X509AuthenticationProvider.authenticate(Authentication authentication)
If the supplied authentication token contains a certificate then this will be passed to the configured
X509AuthoritiesPopulator to obtain the user details and authorities for the user identified by the
certificate. |
Modifier and Type | Method and Description |
---|---|
Authentication |
X509AuthenticationProvider.authenticate(Authentication authentication)
If the supplied authentication token contains a certificate then this will be passed to the configured
X509AuthoritiesPopulator to obtain the user details and authorities for the user identified by the
certificate. |
Modifier and Type | Class and Description |
---|---|
class |
RunAsUserToken
An immutable
Authentication implementation that supports RunAsManagerImpl . |
Modifier and Type | Method and Description |
---|---|
Authentication |
RunAsImplAuthenticationProvider.authenticate(Authentication authentication) |
Authentication |
NullRunAsManager.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
Authentication |
RunAsManagerImpl.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
Modifier and Type | Method and Description |
---|---|
Authentication |
RunAsImplAuthenticationProvider.authenticate(Authentication authentication) |
Authentication |
NullRunAsManager.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
Authentication |
RunAsManagerImpl.buildRunAs(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
Modifier and Type | Method and Description |
---|---|
abstract Authentication |
AbstractProcessingFilter.attemptAuthentication(javax.servlet.http.HttpServletRequest request)
Performs actual authentication.
|
Modifier and Type | Method and Description |
---|---|
protected void |
AbstractProcessingFilter.onSuccessfulAuthentication(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authResult) |
protected void |
AbstractProcessingFilter.successfulAuthentication(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authResult) |
Modifier and Type | Method and Description |
---|---|
Authentication |
CasProcessingFilter.attemptAuthentication(javax.servlet.http.HttpServletRequest request) |
Modifier and Type | Method and Description |
---|---|
void |
LogoutHandler.logout(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authentication)
Causes a logout to be completed.
|
void |
SecurityContextLogoutHandler.logout(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authentication)
Requires the request to be passed in.
|
Modifier and Type | Method and Description |
---|---|
Authentication |
RememberMeServices.autoLogin(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response)
This method will be called whenever the
SecurityContextHolder does not contain an
Authentication and the Acegi Security system wishes to provide an implementation with an
opportunity to authenticate the request using remember-me capabilities. |
Authentication |
NullRememberMeServices.autoLogin(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
Authentication |
TokenBasedRememberMeServices.autoLogin(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response) |
Modifier and Type | Method and Description |
---|---|
void |
RememberMeServices.loginSuccess(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication successfulAuthentication)
Called whenever an interactive authentication attempt is successful.
|
void |
NullRememberMeServices.loginSuccess(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication successfulAuthentication) |
void |
TokenBasedRememberMeServices.loginSuccess(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication successfulAuthentication) |
void |
TokenBasedRememberMeServices.logout(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authentication) |
protected String |
TokenBasedRememberMeServices.retrievePassword(Authentication successfulAuthentication) |
protected String |
TokenBasedRememberMeServices.retrieveUserName(Authentication successfulAuthentication) |
Modifier and Type | Method and Description |
---|---|
protected Authentication |
SwitchUserProcessingFilter.attemptExitUser(javax.servlet.http.HttpServletRequest request)
Attempt to exit from an already switched user.
|
protected Authentication |
SwitchUserProcessingFilter.attemptSwitchUser(javax.servlet.http.HttpServletRequest request)
Attempt to switch to another user.
|
Authentication |
SwitchUserGrantedAuthority.getSource()
Returns the original user associated with a successful user switch.
|
Modifier and Type | Method and Description |
---|---|
void |
SwitchUserAuthorityChanger.modifyGrantedAuthorities(UserDetails targetUser,
Authentication currentAuthentication,
List authoritiesToBeGranted)
Allow subclasses to add or remove authorities that will be granted when in switch user mode.
|
Constructor and Description |
---|
SwitchUserGrantedAuthority(String role,
Authentication source) |
Modifier and Type | Method and Description |
---|---|
Authentication |
AuthenticationProcessingFilter.attemptAuthentication(javax.servlet.http.HttpServletRequest request) |
Authentication |
SiteminderAuthenticationProcessingFilter.attemptAuthentication(javax.servlet.http.HttpServletRequest request) |
Modifier and Type | Method and Description |
---|---|
protected void |
X509ProcessingFilter.successfulAuthentication(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
Authentication authResult)
Puts the
Authentication instance returned by the authentication manager into the secure
context. |
Modifier and Type | Method and Description |
---|---|
void |
AffirmativeBased.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
This concrete implementation simply polls all configured
AccessDecisionVoter s and grants access
if any AccessDecisionVoter voted affirmatively. |
void |
ConsensusBased.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
This concrete implementation simply polls all configured
AccessDecisionVoter s and upon
completion determines the consensus of granted vs denied responses. |
void |
UnanimousBased.decide(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
This concrete implementation polls all configured
AccessDecisionVoter s for each ConfigAttribute and grants access if only grant votes were received. |
int |
AclEntryVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
int |
LabelBasedAclVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Vote on whether or not the user has all the labels necessary to match the method argument's labeled
data.
|
int |
AuthenticatedVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
int |
BasicAclEntryVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
int |
RoleVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config) |
int |
AccessDecisionVoter.vote(Authentication authentication,
Object object,
ConfigAttributeDefinition config)
Indicates whether or not access is granted.
|
Copyright © 2014. All rights reserved.