info.magnolia.jaas.sp.jcr

Class JCRAuthenticationModule

java.lang.Object

info.magnolia.jaas.sp.AbstractLoginModule

info.magnolia.jaas.sp.jcr.JCRAuthenticationModule

All Implemented Interfaces:

UserAwareLoginModule, Serializable, LoginModule

public class JCRAuthenticationModule
extends AbstractLoginModule
implements UserAwareLoginModule, Serializable

Authentication module implementation using JCR to retrieve the users.

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
protected info.magnolia.cms.security.User	user

Fields inherited from class info.magnolia.jaas.sp.AbstractLoginModule

callbackHandler, name, OPTION_REALM, OPTION_SKIP_ON_PREVIOUS_SUCCESS, OPTION_USE_REALM_CALLBACK, options, pswd, realm, sharedState, STATUS, STATUS_FAILED, STATUS_SKIPPED, STATUS_SUCCEDED, STATUS_SUCCEEDED, STATUS_UNAVAILABLE, subject, success, TRY_FIRST_PASS, TRY_MAPPED_PASS, USE_FIRST_PASS, USE_MAPPED_PASS, useRealmCallback

Constructor Summary

Constructors

Constructor and Description
JCRAuthenticationModule()

Method Summary

Methods

Modifier and Type	Method and Description
void	collectGroupNames() Extract all the configured groups from the given node.
void	collectRoleNames() Extract all the configured roles from the given node.
int	getMaxAttempts() Get number of failed login attempts before locking account.
long	getTimeLock() Get time period for time lockout.
info.magnolia.cms.security.User	getUser()
protected void	initUser()
protected void	matchPassword()
void	setACL() Set access control list from the user, roles and groups.
void	setEntity() Set user details.
void	validateUser() /** Checks is the credentials exist in the repository.

Methods inherited from class info.magnolia.jaas.sp.AbstractLoginModule

abort, addGroupName, addRoleName, commit, getGroupNames, getRoleNames, getSharedStatus, getSkip, initialize, login, logout, release, setGroupNames, setRoleNames, setSharedStatus

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

user

protected info.magnolia.cms.security.User user

Constructor Detail

JCRAuthenticationModule

public JCRAuthenticationModule()

Method Detail

getMaxAttempts

public int getMaxAttempts()

Get number of failed login attempts before locking account.

getTimeLock

public long getTimeLock()

Get time period for time lockout.

validateUser

public void validateUser()
                  throws LoginException

/** Checks is the credentials exist in the repository.

Specified by:

validateUser in class AbstractLoginModule

Throws:

LoginException - or specific subclasses (which will be handled further for user feedback)

initUser

protected void initUser()
                 throws LoginException

Throws:

LoginException

matchPassword

protected void matchPassword()
                      throws LoginException

Throws:

LoginException

setEntity

public void setEntity()

Set user details.

Specified by:

setEntity in class AbstractLoginModule

setACL

public void setACL()

Set access control list from the user, roles and groups.

Specified by:

setACL in class AbstractLoginModule

collectRoleNames

public void collectRoleNames()

Extract all the configured roles from the given node. (which can be the user node or a group node)

collectGroupNames

public void collectGroupNames()

Extract all the configured groups from the given node. (which can be the user node or a group node)

getUser

public info.magnolia.cms.security.User getUser()

Specified by:

getUser in interface UserAwareLoginModule