io.undertow.security.impl

Class GSSAPIAuthenticationMechanism

java.lang.Object

io.undertow.security.impl.GSSAPIAuthenticationMechanism

All Implemented Interfaces:

AuthenticationMechanism

public class GSSAPIAuthenticationMechanism
extends Object
implements AuthenticationMechanism

AuthenticationMechanism for GSSAPI / SPNEGO based authentication.

GSSAPI authentication is associated with the HTTP connection, as long as a connection is being re-used allow the authentication state to be re-used.

TODO - May consider an option to allow it to also be associated with the underlying session but that has it's own risks so would need to come with a warning.

Author:

Darran Lofthouse

Nested Class Summary

Nested classes/interfaces inherited from interface io.undertow.security.api.AuthenticationMechanism

AuthenticationMechanism.AuthenticationMechanismOutcome, AuthenticationMechanism.ChallengeResult

Field Summary

Fields

Modifier and Type	Field and Description
static ExclusivityChecker	EXCLUSIVITY_CHECKER

Constructor Summary

Constructors

Constructor and Description
GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory)
GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory, IdentityManager identityManager, Oid... supportedMechanisms)
GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory, Oid... supportedMechanisms)

Method Summary

Modifier and Type	Method and Description
AuthenticationMechanism.AuthenticationMechanismOutcome	authenticate(HttpServerExchange exchange, SecurityContext securityContext) Perform authentication of the request.
AuthenticationMechanism.AuthenticationMechanismOutcome	runGSSAPI(HttpServerExchange exchange, ByteBuffer challenge, SecurityContext securityContext)
AuthenticationMechanism.ChallengeResult	sendChallenge(HttpServerExchange exchange, SecurityContext securityContext) Send an authentication challenge to the remote client.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EXCLUSIVITY_CHECKER

public static final ExclusivityChecker EXCLUSIVITY_CHECKER

Constructor Detail

GSSAPIAuthenticationMechanism

public GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory,
                                     IdentityManager identityManager,
                                     Oid... supportedMechanisms)

GSSAPIAuthenticationMechanism

public GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory,
                                     Oid... supportedMechanisms)

GSSAPIAuthenticationMechanism

public GSSAPIAuthenticationMechanism(GSSAPIServerSubjectFactory subjectFactory)

Method Detail

authenticate

public AuthenticationMechanism.AuthenticationMechanismOutcome authenticate(HttpServerExchange exchange,
                                                                           SecurityContext securityContext)

Description copied from interface: AuthenticationMechanism

Perform authentication of the request. Any potentially blocking work should be performed in the handoff executor provided

Specified by:

authenticate in interface AuthenticationMechanism

Parameters:

exchange - The exchange

Returns:

sendChallenge

public AuthenticationMechanism.ChallengeResult sendChallenge(HttpServerExchange exchange,
                                                             SecurityContext securityContext)

Description copied from interface: AuthenticationMechanism

Send an authentication challenge to the remote client.

The individual mechanisms should update the response headers and body of the message as appropriate however they should not set the response code, instead that should be indicated in the AuthenticationMechanism.ChallengeResult and the most appropriate overall response code will be selected. This method should not return null.

Specified by:

sendChallenge in interface AuthenticationMechanism

Parameters:

exchange - The exchange

securityContext - The security context

Returns:

A AuthenticationMechanism.ChallengeResult indicating if a challenge was sent and the desired response code.

runGSSAPI

public AuthenticationMechanism.AuthenticationMechanismOutcome runGSSAPI(HttpServerExchange exchange,
                                                                        ByteBuffer challenge,
                                                                        SecurityContext securityContext)