ConfigurableSpnegoAuthenticator
instead.@Deprecated public class SpnegoAuthenticator extends LoginAuthenticator
Authenticator.AuthConfiguration, Authenticator.Factory
Modifier and Type | Field and Description |
---|---|
private java.lang.String |
_authMethod
Deprecated.
|
private static Logger |
LOG
Deprecated.
|
_identityService, _loginService
Constructor and Description |
---|
SpnegoAuthenticator()
Deprecated.
|
SpnegoAuthenticator(java.lang.String authMethod)
Deprecated.
Allow for a custom authMethod value to be set for instances where SPNEGO may not be appropriate
|
Modifier and Type | Method and Description |
---|---|
java.lang.String |
getAuthMethod()
Deprecated.
|
(package private) java.lang.String |
getAuthSchemeFromHeader(java.lang.String header)
Deprecated.
Extracts the auth_scheme from the HTTP Authorization header,
Authorization: <auth_scheme> <token> . |
(package private) boolean |
isAuthSchemeNegotiate(java.lang.String authScheme)
Deprecated.
Determines if provided auth scheme text from the Authorization header is case-insensitively
equal to
negotiate . |
boolean |
secureResponse(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
boolean mandatory,
Authentication.User validatedUser)
Deprecated.
is response secure
|
Authentication |
validateRequest(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
boolean mandatory)
Deprecated.
Validate a request
|
getLoginService, login, logout, prepareRequest, renewSession, setConfiguration
private static final Logger LOG
private java.lang.String _authMethod
public SpnegoAuthenticator()
public SpnegoAuthenticator(java.lang.String authMethod)
authMethod
- the auth methodpublic java.lang.String getAuthMethod()
public Authentication validateRequest(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory) throws ServerAuthException
Authenticator
request
- The requestresponse
- The responsemandatory
- True if authentication is mandatory.Authentication.User
. If a response has
been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will
implement Authentication.ResponseSent
. If Authentication is not mandatory, then a
Authentication.Deferred
may be returned.ServerAuthException
- if unable to validate requestjava.lang.String getAuthSchemeFromHeader(java.lang.String header)
Authorization: <auth_scheme> <token>
.header
- The HTTP Authorization header or null.boolean isAuthSchemeNegotiate(java.lang.String authScheme)
negotiate
.authScheme
- The auth scheme component of the Authorization headernegotiate
, False otherwise.public boolean secureResponse(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, boolean mandatory, Authentication.User validatedUser) throws ServerAuthException
Authenticator
request
- the requestresponse
- the responsemandatory
- if security is mandatorvalidatedUser
- the user that was validatedServerAuthException
- if unable to test response