org.jboss.as.security.api

Class ConnectionSecurityContext

java.lang.Object

org.jboss.as.security.api.ConnectionSecurityContext

public class ConnectionSecurityContext
extends Object

Utility class to allow inspection and replacement of identity associated with the Connection. As a connection is established to the application server the remote user is authenticated, this API allows the Collection of Principals for the remote user to be obtained, the API then allows for an alternative identity to be pushed by interceptors for validation in the security interceptors for subsequent EJB invocations.

Author:

Darran Lofthouse

Method Summary

Modifier and Type	Method and Description
static Collection<Principal>	getConnectionPrincipals() Obtain a Collection containing the Principal instances for the user associated with the connection.
static void	popIdentity(ContextStateCache stateCache) Pop the identity previously associated and restore internal state to it's previous value.
static ContextStateCache	pushIdentity(Principal principal, Object credential) Push a new Principal and Credential pair.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

getConnectionPrincipals

public static Collection<Principal> getConnectionPrincipals()

Obtain a Collection containing the Principal instances for the user associated with the connection. Note: This method should be called from within a PrivilegedAction.

Returns:

The Collection of Principals for the user authenticated with the connection. An empty Collection will be returned of no user is associated with the connection, null will be returned if no connection is associated with the Thread

pushIdentity

public static ContextStateCache pushIdentity(Principal principal,
                                             Object credential)
                                      throws Exception

Push a new Principal and Credential pair. This method is to be called before an EJB invocation is passed through it's security interceptor, at that point the Principal and Credential pair can be verified. Note: This method should be called from within a PrivilegedAction.

Parameters:

principal - - The alternative Principal to use in verification before the next EJB is called.

credential - - The credential to verify with the

Returns:

A ContextStateCache that can later be used to pop the identity pushed here and restore internal state to it's previous values.

Throws:

Exception - If there is a problem associating the new Principal and Credential pair.

popIdentity

public static void popIdentity(ContextStateCache stateCache)

Pop the identity previously associated and restore internal state to it's previous value.

Parameters:

stateCache - - The cache containing the state as it was when pushIdentity was called.