Interface AuthConfigProvider
-
public interface AuthConfigProvider
This interface is implemented by objects that can be used to obtain authentication context configuration objects, that is,ClientAuthConfig
orServerAuthConfig
objects.Authentication context configuration objects serve as sources of the authentication context objects, that is,
ClientAuthContext
orServerAuthContext
objects, for a specific message layer and messaging context.Authentication context objects encapsulate the initialization, configuration, and invocation of authentication modules, that is,
ClientAuthModule
orServerAuthModule
objects, for a specific message exchange within a specific message layer and messaging context.Callers do not directly operate on authentication modules. Instead, they rely on a ClientAuthContext or ServerAuthContext to manage the invocation of modules. A caller obtains an instance of ClientAuthContext or ServerAuthContext by calling the respective
getAuthContext
method on aClientAuthConfig
orServerAuthConfig
object obtained from an AuthConfigProvider.The following represents a typical sequence of calls for obtaining a client authentication context object, and then using it to secure a request.
- AuthConfigProvider provider;
- ClientAuthConfig config = provider.getClientAuthConfig(layer,appID,cbh);
- String authContextID = config.getAuthContextID(messageInfo);
- ClientAuthContext context = config.getAuthContext(authContextID,subject,properties);
- context.secureRequest(messageInfo,subject);
Every implementation of this interface must offer a public, two argument constructor with the following signature:
public AuthConfigProviderImpl(Map properties, AuthConfigFactory factory);
public String registerConfigProvider(AuthConfigProvider provider, String layer, String appContext, String description);
- See Also:
ClientAuthContext
,ServerAuthContext
,AuthConfigFactory
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description ClientAuthConfig
getClientAuthConfig(String layer, String appContext, CallbackHandler handler)
Get an instance of ClientAuthConfig from this provider.ServerAuthConfig
getServerAuthConfig(String layer, String appContext, CallbackHandler handler)
Get an instance of ServerAuthConfig from this provider.void
refresh()
Causes a dynamic configuration provider to update its internal state such that any resulting change to its state is reflected in the corresponding authentication context configuration objects previously created by the provider within the current process context.
-
-
-
Method Detail
-
getClientAuthConfig
ClientAuthConfig getClientAuthConfig(String layer, String appContext, CallbackHandler handler) throws AuthException
Get an instance of ClientAuthConfig from this provider.The implementation of this method returns a ClientAuthConfig instance that describes the configuration of ClientAuthModules at a given message layer, and for use in an identified application context.
- Parameters:
layer
- A String identifying the message layer for the returned ClientAuthConfig object. This argument must not be null.appContext
- A String that identifies the messaging context for the returned ClientAuthConfig object. This argument must not be null.handler
- A CallbackHandler to be passed to the ClientAuthModules encapsulated by ClientAuthContext objects derived from the returned ClientAuthConfig. This argument may be null, in which case the implementation may assign a default handler to the configuration. The CallbackHandler assigned to the configuration must support the Callback objects required to be supported by the profile of this specification being followed by the messaging runtime. The CallbackHandler instance must be initialized with any application context needed to process the required callbacks on behalf of the corresponding application.- Returns:
- A ClientAuthConfig Object that describes the configuration of ClientAuthModules at the message layer and messaging context identified by the layer and appContext arguments. This method does not return null.
- Throws:
AuthException
- If this provider does not support the assignment of a default CallbackHandler to the returned ClientAuthConfig.SecurityException
- If the caller does not have permission to retrieve the configuration.
-
getServerAuthConfig
ServerAuthConfig getServerAuthConfig(String layer, String appContext, CallbackHandler handler) throws AuthException
Get an instance of ServerAuthConfig from this provider.The implementation of this method returns a ServerAuthConfig instance that describes the configuration of ServerAuthModules at a given message layer, and for a particular application context.
- Parameters:
layer
- A String identifying the message layer for the returned ServerAuthConfig object. This argument must not be null.appContext
- A String that identifies the messaging context for the returned ServerAuthConfig object. This argument must not be null.handler
- A CallbackHandler to be passed to the ServerAuthModules encapsulated by ServerAuthContext objects derived from the returned ServerAuthConfig. This argument may be null, in which case the implementation may assign a default handler to the configuration. The CallbackHandler assigned to the configuration must support the Callback objects required to be supported by the profile of this specification being followed by the messaging runtime. The CallbackHandler instance must be initialized with any application context needed to process the required callbacks on behalf of the corresponding application.- Returns:
- A ServerAuthConfig Object that describes the configuration of ServerAuthModules at a given message layer, and for a particular application context. This method does not return null.
- Throws:
AuthException
- If this provider does not support the assignment of a default CallbackHandler to the returned ServerAuthConfig.SecurityException
- If the caller does not have permission to retrieve the configuration.
-
refresh
void refresh()
Causes a dynamic configuration provider to update its internal state such that any resulting change to its state is reflected in the corresponding authentication context configuration objects previously created by the provider within the current process context.- Throws:
SecurityException
- If the caller does not have permission to refresh the provider, or if an error occurred during the refresh.
-
-