public abstract class AbstractUsernameIdentityValidator<T> extends AbstractIdentityValidator<T>
| Constructor and Description |
|---|
AbstractUsernameIdentityValidator() |
| Modifier and Type | Method and Description |
|---|---|
protected abstract T |
authenticateAnonymous(Session session)
Create and return an identity object for an anonymous user.
|
protected abstract T |
authenticateUsernamePassword(Session session,
String username,
String password)
Authenticate
username with password, returning an identity object of type T if the
authentication succeeded, or null if the authentication failed. |
protected T |
validateAnonymousToken(Session session,
AnonymousIdentityToken token,
UserTokenPolicy tokenPolicy,
SignatureData tokenSignature)
Validate an
AnonymousIdentityToken and return an identity Object that represents the user. |
protected T |
validateUsernameToken(Session session,
UserNameIdentityToken token,
UserTokenPolicy tokenPolicy,
SignatureData tokenSignature)
Validate a
UserNameIdentityToken and return an identity Object that represents the user. |
decryptTokenData, validateIdentityToken, validateIssuedIdentityToken, validateX509Tokenprotected T validateAnonymousToken(Session session, AnonymousIdentityToken token, UserTokenPolicy tokenPolicy, SignatureData tokenSignature) throws UaException
AbstractIdentityValidatorAnonymousIdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
validateAnonymousToken in class AbstractIdentityValidator<T>session - the Session the request is arriving on.token - the AnonymousIdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.tokenSignature - the SignatureData sent in the ActivateSessionRequest.UaException - if the token is invalid, rejected, or user access is denied.protected T validateUsernameToken(Session session, UserNameIdentityToken token, UserTokenPolicy tokenPolicy, SignatureData tokenSignature) throws UaException
AbstractIdentityValidatorUserNameIdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
validateUsernameToken in class AbstractIdentityValidator<T>session - the Session the request is arriving on.token - the UserNameIdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.tokenSignature - the SignatureData sent in the ActivateSessionRequest.UaException - if the token is invalid, rejected, or user access is denied.@Nullable protected abstract T authenticateAnonymous(Session session)
session - the Session being activated.T representig an anonymous user, or null if anonymous
authentication is not allowed.@Nullable protected abstract T authenticateUsernamePassword(Session session, String username, String password)
username with password, returning an identity object of type T if the
authentication succeeded, or null if the authentication failed.session - the Session being activated.username - the username to authenticate.password - the password to authenticate the user with.T if the authentication succeeded, or null if it failed.Copyright © 2021. All rights reserved.