public abstract class AbstractUsernameTokenAuthenticatingInterceptor extends WSS4JInInterceptor
| Modifier and Type | Class and Description |
|---|---|
protected class |
AbstractUsernameTokenAuthenticatingInterceptor.CustomValidator |
PRINCIPAL_RESULT, PROCESSOR_MAP, SAML_ROLE_ATTRIBUTENAME_DEFAULT, SECURITY_PROCESSED, SIGNATURE_RESULT, TIMESTAMP_RESULT, VALIDATOR_MAP| Constructor and Description |
|---|
AbstractUsernameTokenAuthenticatingInterceptor() |
AbstractUsernameTokenAuthenticatingInterceptor(Map<String,Object> properties) |
| Modifier and Type | Method and Description |
|---|---|
protected SecurityContext |
createSecurityContext(Principal p) |
protected abstract Subject |
createSubject(String name,
String password,
boolean isDigest,
String nonce,
String created)
Create a Subject representing a current user and its roles.
|
protected SecurityContext |
doCreateSecurityContext(Principal p,
Subject subject)
Creates default SecurityContext which implements isUserInRole using the
following approach : skip the first Subject principal, and then check optional
Groups the principal is a member of.
|
protected org.apache.ws.security.WSSecurityEngine |
getSecurityEngine(boolean utNoCallbacks) |
boolean |
getSupportDigestPasswords() |
void |
handleMessage(SoapMessage msg)
Intercepts a message.
|
protected void |
setSubject(String name,
String password,
boolean isDigest,
String nonce,
String created) |
void |
setSupportDigestPasswords(boolean support) |
advanceBody, computeAction, configureReplayCaches, createSecurityContext, createSecurityEngine, doResults, doResults, getAdditionalInterceptors, getCallback, getCallback, getProperty, getReplayCache, isGET, isNonceCacheRequired, isSamlCacheRequired, isSecurityContextPrincipal, isTimestampCacheRequired, setAlgorithmSuites, setIgnoreActionsgetAfter, getBefore, getId, getOption, getPassword, getPhase, getProperties, getRoles, getUnderstoodHeaders, handleFault, isRequestor, loadCryptoFromPropertiesFile, postHandleMessage, setAfter, setBefore, setId, setPassword, setPhase, setProperties, setProperty, setProperty, translatePropertiescheckReceiverResults, checkReceiverResultsAnyOrder, checkSignatureConfirmation, decodeAlgorithmSuite, decodeAllowUsernameTokenNoPassword, decodeBooleanConfigValue, decodeBSPCompliance, decodeCustomPasswordTypes, decodeDecryptionParameter, decodeEnableSignatureConfirmation, decodeEncryptionParameter, decodeFutureTimeToLive, decodeMustUnderstand, decodeNamespaceQualifiedPasswordTypes, decodePasswordType, decodePasswordTypeStrict, decodeRequireSignedEncryptedDataElements, decodeSignatureParameter, decodeSignatureParameter2, decodeTimestampPrecision, decodeTimestampStrict, decodeTimeToLive, decodeUseEncodedPasswords, decodeUseSingleCertificate, decodeUTParameter, doReceiverAction, doSenderAction, getCallbackHandler, getClassLoader, getPasswordCallbackHandler, getPasswordCB, getString, getStringOption, loadCrypto, loadDecryptionCrypto, loadEncryptionCrypto, loadSignatureCryptopublic AbstractUsernameTokenAuthenticatingInterceptor()
public void setSupportDigestPasswords(boolean support)
public boolean getSupportDigestPasswords()
public void handleMessage(SoapMessage msg) throws Fault
InterceptorhandleMessage in interface Interceptor<SoapMessage>handleMessage in class WSS4JInInterceptorFaultprotected SecurityContext createSecurityContext(Principal p)
createSecurityContext in class WSS4JInInterceptorprotected SecurityContext doCreateSecurityContext(Principal p, Subject subject)
p - principalsubject - subjectprotected void setSubject(String name, String password, boolean isDigest, String nonce, String created) throws org.apache.ws.security.WSSecurityException
org.apache.ws.security.WSSecurityExceptionprotected abstract Subject createSubject(String name, String password, boolean isDigest, String nonce, String created) throws SecurityException
name - usernamepassword - passwordisDigest - true if a password digest is usednonce - optional noncecreated - optional timestampSecurityExceptionprotected org.apache.ws.security.WSSecurityEngine getSecurityEngine(boolean utNoCallbacks)
getSecurityEngine in class WSS4JInInterceptorApache CXF