| Package | Description |
|---|---|
| org.eclipse.jetty.jaas |
Jetty Jaas : Support for Jaas
|
| org.eclipse.jetty.security |
Jetty Security : Modular Support for Security in Jetty
|
| org.eclipse.jetty.security.authentication |
Jetty Security : Authenticators and Callbacks
|
| org.eclipse.jetty.server |
Jetty Server : Core Server API
|
| Modifier and Type | Method and Description |
|---|---|
UserIdentity |
JAASLoginService.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest request) |
| Modifier and Type | Method and Description |
|---|---|
void |
JAASLoginService.logout(UserIdentity user) |
boolean |
JAASLoginService.validate(UserIdentity user) |
| Modifier and Type | Class and Description |
|---|---|
class |
DefaultUserIdentity
The default implementation of UserIdentity.
|
class |
SpnegoUserIdentity |
| Modifier and Type | Field and Description |
|---|---|
private UserIdentity |
SpnegoUserIdentity._roleDelegate |
protected UserIdentity |
AbstractUserAuthentication._userIdentity |
| Modifier and Type | Field and Description |
|---|---|
private java.util.Map<java.lang.String,UserIdentity> |
UserStore._knownUserIdentities |
| Modifier and Type | Method and Description |
|---|---|
UserIdentity |
DefaultIdentityService.getSystemUserIdentity() |
UserIdentity |
IdentityService.getSystemUserIdentity() |
UserIdentity |
AbstractUserAuthentication.getUserIdentity() |
UserIdentity |
UserStore.getUserIdentity(java.lang.String userName) |
UserIdentity |
ConfigurableSpnegoLoginService.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest req) |
UserIdentity |
SpnegoLoginService.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest request)
Deprecated.
username will be null since the credentials will contain all the relevant info
|
UserIdentity |
LoginService.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest request)
Login a user.
|
UserIdentity |
AbstractLoginService.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest request) |
UserIdentity |
DefaultIdentityService.newUserIdentity(javax.security.auth.Subject subject,
java.security.Principal userPrincipal,
java.lang.String[] roles) |
UserIdentity |
IdentityService.newUserIdentity(javax.security.auth.Subject subject,
java.security.Principal userPrincipal,
java.lang.String[] roles)
Create a new UserIdentity for use with this identity service.
|
| Modifier and Type | Method and Description |
|---|---|
java.util.Map<java.lang.String,UserIdentity> |
UserStore.getKnownUserIdentities() |
| Modifier and Type | Method and Description |
|---|---|
java.lang.Object |
DefaultIdentityService.associate(UserIdentity user)
If there are roles refs present in the scope, then wrap the UserIdentity
with one that uses the role references in the
isUserInRole(String, org.eclipse.jetty.server.UserIdentity.Scope) |
java.lang.Object |
IdentityService.associate(UserIdentity user)
Associate a user identity with the current thread.
|
protected abstract boolean |
SecurityHandler.checkWebResourcePermissions(java.lang.String pathInContext,
Request request,
Response response,
java.lang.Object constraintInfo,
UserIdentity userIdentity) |
protected boolean |
ConstraintSecurityHandler.checkWebResourcePermissions(java.lang.String pathInContext,
Request request,
Response response,
java.lang.Object constraintInfo,
UserIdentity userIdentity) |
void |
ConfigurableSpnegoLoginService.logout(UserIdentity user) |
void |
SpnegoLoginService.logout(UserIdentity user)
Deprecated.
|
void |
LoginService.logout(UserIdentity user) |
void |
AbstractLoginService.logout(UserIdentity user) |
java.lang.Object |
DefaultIdentityService.setRunAs(UserIdentity user,
RunAsToken token) |
java.lang.Object |
IdentityService.setRunAs(UserIdentity user,
RunAsToken token)
Associate a runas Token with the current user and thread.
|
boolean |
ConfigurableSpnegoLoginService.validate(UserIdentity user) |
boolean |
SpnegoLoginService.validate(UserIdentity user)
Deprecated.
|
boolean |
LoginService.validate(UserIdentity user)
Validate a user identity.
|
boolean |
AbstractLoginService.validate(UserIdentity user) |
| Constructor and Description |
|---|
AbstractUserAuthentication(java.lang.String method,
UserIdentity userIdentity) |
SpnegoUserIdentity(javax.security.auth.Subject subject,
java.security.Principal principal,
UserIdentity roleDelegate) |
UserAuthentication(java.lang.String method,
UserIdentity userIdentity) |
| Modifier and Type | Field and Description |
|---|---|
private UserIdentity |
ConfigurableSpnegoAuthenticator.UserIdentityHolder._userIdentity |
| Modifier and Type | Method and Description |
|---|---|
UserIdentity |
SessionAuthentication.getUserIdentity() |
UserIdentity |
AuthorizationService.getUserIdentity(javax.servlet.http.HttpServletRequest request,
java.lang.String name) |
UserIdentity |
DigestAuthenticator.login(java.lang.String username,
java.lang.Object credentials,
javax.servlet.ServletRequest request) |
UserIdentity |
FormAuthenticator.login(java.lang.String username,
java.lang.Object password,
javax.servlet.ServletRequest request) |
UserIdentity |
LoginAuthenticator.login(java.lang.String username,
java.lang.Object password,
javax.servlet.ServletRequest servletRequest)
If the UserIdentity is not null after this method calls
LoginService.login(String, Object, ServletRequest), it
is assumed that the user is fully authenticated and we need to change the session id to prevent
session fixation vulnerability. |
UserIdentity |
ConfigurableSpnegoAuthenticator.login(java.lang.String username,
java.lang.Object password,
javax.servlet.ServletRequest servletRequest)
Only renew the session id if the user has been fully authenticated, don't
renew the session for any of the intermediate request/response handshakes.
|
| Constructor and Description |
|---|
FormAuthentication(java.lang.String method,
UserIdentity userIdentity) |
SessionAuthentication(java.lang.String method,
UserIdentity userIdentity,
java.lang.Object credentials) |
UserIdentityHolder(UserIdentity userIdentity) |
| Modifier and Type | Interface and Description |
|---|---|
static interface |
UserIdentity.UnauthenticatedUserIdentity |
| Modifier and Type | Field and Description |
|---|---|
static UserIdentity |
UserIdentity.UNAUTHENTICATED_IDENTITY |
| Modifier and Type | Method and Description |
|---|---|
UserIdentity |
Request.getResolvedUserIdentity() |
UserIdentity |
Authentication.User.getUserIdentity() |
UserIdentity |
Request.getUserIdentity() |