org.eclipse.milo.opcua.sdk.server.identity

Class AbstractX509IdentityValidator<T>

java.lang.Object

org.eclipse.milo.opcua.sdk.server.identity.AbstractIdentityValidator<T>

org.eclipse.milo.opcua.sdk.server.identity.AbstractX509IdentityValidator<T>

All Implemented Interfaces:

IdentityValidator<T>

Direct Known Subclasses:

X509IdentityValidator

public abstract class AbstractX509IdentityValidator<T>
extends AbstractIdentityValidator<T>

Constructor Summary

Constructors

Constructor and Description
AbstractX509IdentityValidator()

Method Summary

Modifier and Type	Method and Description
protected abstract T	authenticateIdentityCertificate(Session session, X509Certificate identityCertificate) Create and return an identity object for the user identified by identityCertificate.
protected T	validateX509Token(Session session, X509IdentityToken token, UserTokenPolicy tokenPolicy, SignatureData tokenSignature) Validate an X509IdentityToken and return an identity Object that represents the user.

Methods inherited from class org.eclipse.milo.opcua.sdk.server.identity.AbstractIdentityValidator

decryptTokenData, validateAnonymousToken, validateIdentityToken, validateIssuedIdentityToken, validateUsernameToken

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractX509IdentityValidator

public AbstractX509IdentityValidator()

Method Detail

validateX509Token

protected T validateX509Token(Session session,
                              X509IdentityToken token,
                              UserTokenPolicy tokenPolicy,
                              SignatureData tokenSignature)
                       throws UaException

Description copied from class: AbstractIdentityValidator

Validate an X509IdentityToken and return an identity Object that represents the user.

This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.

Overrides:

validateX509Token in class AbstractIdentityValidator<T>

Parameters:

session - the Session the request is arriving on.

token - the X509IdentityToken.

tokenPolicy - the UserTokenPolicy specified by the policyId in token.

tokenSignature - the SignatureData sent in the ActivateSessionRequest.

Returns:

an identity Object that represents the user.

Throws:

UaException - if the token is invalid, rejected, or user access is denied.

authenticateIdentityCertificate

@Nullable
protected abstract T authenticateIdentityCertificate(Session session,
                                                               X509Certificate identityCertificate)

Create and return an identity object for the user identified by identityCertificate.

Possession of the private key associated with this certificate has been verified prior to this call.

Parameters:

session - the Session being activated.

identityCertificate - the X509Certificate identifying the user.

Returns:

an identity object of type T if the authentication succeeded, or null if it failed.