org.jboss.security.auth.message.config

Class JBossClientAuthContext

java.lang.Object

org.jboss.security.auth.message.config.JBossClientAuthContext

All Implemented Interfaces:

ClientAuth, ClientAuthContext

public class JBossClientAuthContext
extends Object
implements ClientAuthContext

Default Client Authentication Context

Since:

May 17, 2006

Version:

$Revision$

Author:

Anil Saldhana

Constructor Summary

Constructors

Constructor and Description
JBossClientAuthContext(JBossClientAuthConfig config) Create a new JBossClientAuthContext.

Method Summary

Methods

Modifier and Type	Method and Description
void	cleanSubject(MessageInfo messageInfo, Subject subject) Remove implementation specific principals and credentials from the subject.
AuthStatus	secureRequest(MessageInfo messageInfo, Subject clientSubject) Secure a service request message before sending it to the service.
AuthStatus	validateResponse(MessageInfo messageInfo, Subject clientSubject, Subject serviceSubject) Validate a received service response.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JBossClientAuthContext

public JBossClientAuthContext(JBossClientAuthConfig config)

Create a new JBossClientAuthContext.

Parameters:

config - Client Auth Config

Method Detail

cleanSubject

public void cleanSubject(MessageInfo messageInfo,
                Subject subject)
                  throws AuthException

Description copied from interface: ClientAuth

Remove implementation specific principals and credentials from the subject.

Specified by:

cleanSubject in interface ClientAuth

Parameters:

messageInfo - - A contextual object that encapsulates the client request and server response objects, and that may be used to save state across a sequence of calls made to the methods of this interface for the purpose of completing a secure message exchange.

subject - - The Subject instance from which the Principals and credentials are to be removed.

Throws:

AuthException - if an error occurs during the Subject processing.

See Also:

ClientAuth.cleanSubject(javax.security.auth.message.MessageInfo, javax.security.auth.Subject)

secureRequest

public AuthStatus secureRequest(MessageInfo messageInfo,
                       Subject clientSubject)
                         throws AuthException

Description copied from interface: ClientAuth

Secure a service request message before sending it to the service.

Sign and encrpt the service request, for example.

Specified by:

secureRequest in interface ClientAuth

Parameters:

messageInfo - - A contextual object that encapsulates the client request and server response objects, and that may be used to save state across a sequence of calls made to the methods of this interface for the purpose of completing a secure message exchange.

clientSubject - - A Subject that represents the source of the service request, or null. It may be used by the method implementation as the source of Principals or credentials to be used to secure the request. If the Subject is not null, the method implementation may add additional Principals or credentials (pertaining to the source of the service request) to the Subject.

Returns:

an AuthStatus object representing the completion status of the processing performed by the module.

• AuthStatus.PROCEED returned when the application request message was successfully secured. The runtime may proceed to send the request message. returned in AuthParam.
• AuthStatus.RETRY returned when the module replaces the application request message with an mechanism specific message to be sent in advance of the application message. The runtime should throw an exception if it is unable to process the rety. Otherwise, the runtime should send the request message returned in AuthParam (and without calling secureRequest).
• AuthStatus.ERROR returned when the processing by the module failed and indicates that the module has defined an appropriate error request message in the AuthParam. The runtime may send the request message returned in AuthParam (without calling SecureRequest), and must discontinue its processing of the application request.

Throws:

AuthException - when the module wishes to signal a failure in securing the request and without establishing a corresponding error request message. The runtime must discontinue its processing of the message exchange.

See Also:

ClientAuthContext#secureRequest(javax.security.auth.message.MessageInfo, javax.security.auth.Subject

validateResponse

public AuthStatus validateResponse(MessageInfo messageInfo,
                          Subject clientSubject,
                          Subject serviceSubject)
                            throws AuthException

Description copied from interface: ClientAuth

Validate a received service response.

This method is called to transform the mechanism-specific response message acquired by calling getResponseMessage (on messageInfo) into the validated application message to be returned to the message processing runtime. If the response message is a (mechanism-specific) meta-message, the method implementation must attempt to transform the meta-message into the next mechanism-specific request message to be sent by the runtime.

Specified by:

validateResponse in interface ClientAuth

Parameters:

messageInfo - - A contextual object that encapsulates the client request and server response objects, and that may be used to save state across a sequence of calls made to the methods of this interface for the purpose of completing a secure message exchange.

clientSubject - - A Subject that represents the recipient of the service response, or null. It may be used by the method implementation as the source of Principals or credentials to be used to validate the response. If the Subject is not null, the method implementation may add additional Principals or credentials (pertaining to the recipient of the service request) to the Subject.

serviceSubject - - A Subject that represents the source of the service response, or null. If the Subject is not null, the method implementation may add additional Principals or credentials (pertaining to the source of the service response) to the Subject.

Returns:

an AuthStatus object representing the completion status of the processing performed by the module.

• AuthStatus.PROCEED returned when the validation of the application response message succeded. The runtime may proceed to return the response message in the AuthParam to the application.
• AuthStatus.RETRY returned when the message validation succeded, but when the validated message is a mechanism specific message sent in advance of the application message. The runtime must not proceed to process the response message in the AuthParam. The runtime should throw an exception if it is unable to process the retry. Otherwise, it should send the request message returned in AuthParam (and without calling secureRequest).
• AuthStatus.ERROR returned when the validation failed and indicates that the module has defined an appropriate error request message in the AuthParam. The runtime must not proceed to process the response message in the AuthParam, and may send the request message returned in AuthParam (and without calling secureRequest).

Throws:

AuthException

See Also:

ClientAuth.validateResponse(javax.security.auth.message.MessageInfo, javax.security.auth.Subject, javax.security.auth.Subject)