org.apache.qpid.server.security

Class SubjectCreator

java.lang.Object

org.apache.qpid.server.security.SubjectCreator

public class SubjectCreator
extends Object

Creates a Subject formed by the Principal's returned from:

1. Authenticating using an AuthenticationProvider

SubjectCreator is a facade to the AuthenticationProvider, and is intended to be the single place that Subject's are created in the broker.

Constructor Summary

Constructors

Constructor and Description
SubjectCreator(AuthenticationProvider<?> authenticationProvider, Collection<GroupProvider<?>> groupProviders, boolean secure)

Method Summary

Modifier and Type	Method and Description
SubjectAuthenticationResult	authenticate(SaslServer server, byte[] response) Authenticates a user using SASL negotiation.
SubjectAuthenticationResult	authenticate(String username, String password)
SubjectAuthenticationResult	createResultWithGroups(AuthenticationResult authenticationResult)
SaslServer	createSaslServer(String mechanism, String localFQDN, Principal externalPrincipal)
Subject	createSubjectWithGroups(Principal userPrincipal)
AuthenticationProvider<?>	getAuthenticationProvider()
List<String>	getMechanisms() Gets the known SASL mechanisms

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectCreator

public SubjectCreator(AuthenticationProvider<?> authenticationProvider,
                      Collection<GroupProvider<?>> groupProviders,
                      boolean secure)

Method Detail

getAuthenticationProvider

public AuthenticationProvider<?> getAuthenticationProvider()

getMechanisms

public List<String> getMechanisms()

Gets the known SASL mechanisms

Returns:

SASL mechanism names, space separated.

createSaslServer

public SaslServer createSaslServer(String mechanism,
                                   String localFQDN,
                                   Principal externalPrincipal)
                            throws SaslException

Throws:

SaslException

See Also:

AuthenticationProvider.createSaslServer(String, String, Principal)

authenticate

public SubjectAuthenticationResult authenticate(SaslServer server,
                                                byte[] response)

Authenticates a user using SASL negotiation.

Parameters:

server - SASL server

response - SASL response to process

authenticate

public SubjectAuthenticationResult authenticate(String username,
                                                String password)

createResultWithGroups

public SubjectAuthenticationResult createResultWithGroups(AuthenticationResult authenticationResult)

createSubjectWithGroups

public Subject createSubjectWithGroups(Principal userPrincipal)