- CallerOnlyCredential - Class in javax.security.enterprise.credential
-
CallerOnlyCredential
represents a credential that only
contains a caller name and no secret of any kind.
- CallerOnlyCredential(String) - Constructor for class javax.security.enterprise.credential.CallerOnlyCredential
-
- CallerPrincipal - Class in javax.security.enterprise
-
Principal that represents the caller principal associated with the invocation being
processed by the container (e.g.
- CallerPrincipal(String) - Constructor for class javax.security.enterprise.CallerPrincipal
-
- cleanClientSubject() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Convenience method to clean the subject associated with this context.
- cleanClientSubject() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- cleanSubject(HttpServletRequest, HttpServletResponse, HttpMessageContext) - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism
-
Remove mechanism specific principals and credentials from the subject and any other state the mechanism
might have used.
- clear() - Method in class javax.security.enterprise.credential.AbstractClearableCredential
-
- clear() - Method in interface javax.security.enterprise.credential.Credential
-
Clears the credential.
- clear() - Method in class javax.security.enterprise.credential.Password
-
Securely clears the password value.
- clearCredential() - Method in class javax.security.enterprise.credential.AbstractClearableCredential
-
Invokes the specific subclass to securely clear the credential value.
- clearCredential() - Method in class javax.security.enterprise.credential.UsernamePasswordCredential
-
- compareTo(String) - Method in class javax.security.enterprise.credential.Password
-
- compareTo(String, String) - Method in class javax.security.enterprise.credential.UsernamePasswordCredential
-
- credential(Credential) - Method in class javax.security.enterprise.authentication.mechanism.http.AuthenticationParameters
-
Sets the credential to be used by the authentication mechanism responding
to the authenticate call in which these AuthenticationParameters are passed.
- Credential - Interface in javax.security.enterprise.credential
-
Credential
represents the credential the caller will use to authenticate.
- CredentialValidationResult - Class in javax.security.enterprise.identitystore
-
CredentialValidationResult
is the result from an attempt to
validate an instance of
Credential
.
- CredentialValidationResult(String) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult(CallerPrincipal) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult(String, Set<String>) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult(CallerPrincipal, Set<String>) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult(String, String, String, String, Set<String>) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult(String, CallerPrincipal, String, String, Set<String>) - Constructor for class javax.security.enterprise.identitystore.CredentialValidationResult
-
Constructor for a VALID result.
- CredentialValidationResult.Status - Enum in javax.security.enterprise.identitystore
-
- CustomFormAuthenticationMechanismDefinition - Annotation Type in javax.security.enterprise.authentication.mechanism.http
-
Annotation used to define a container authentication mechanism that implements
authentication resembling Servlet FORM authentication (Servlet spec 13.6.3).
- generate(char[]) - Method in interface javax.security.enterprise.identitystore.PasswordHash
-
Generate an encoded password hash value for storage in a user's account.
- generateLoginToken(CallerPrincipal, Set<String>) - Method in interface javax.security.enterprise.identitystore.RememberMeIdentityStore
-
Associates the given principal and groups with a token.
- getAuthParameters() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the parameters that were provided with the SecurityContext#authenticate(AuthParameters) call.
- getAuthParameters() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getCaller() - Method in class javax.security.enterprise.credential.CallerOnlyCredential
-
- getCaller() - Method in class javax.security.enterprise.credential.UsernamePasswordCredential
-
- getCallerDn() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Return the CallerPrincipal for the validated credential.
- getCallerGroups() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Determines the set of groups that the specified Caller is in, based on
the associated identity store.
- getCallerGroups(CredentialValidationResult) - Method in interface javax.security.enterprise.identitystore.IdentityStore
-
Returns groups for the caller, who is identified by the
CallerPrincipal
(and potentially other values) found in the
validationResult
parameter.
- getCallerPrincipal() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Gets the Principal set by a call to notifyContainerAboutLogin().
- getCallerPrincipal() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getCallerPrincipal() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Return the CallerPrincipal for the validated credential.
- getCallerPrincipal() - Method in interface javax.security.enterprise.SecurityContext
-
Retrieve the platform-specific java.security.Principal
that represents
the name of authenticated caller, or null if the current caller is not authenticated.
- getCallerUniqueId() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Return a string that uniquely identifies this caller within the identity store
(since the Principal name used may not be unique).
- getClientSubject() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the subject for which authentication is to take place.
- getClientSubject() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getCredential() - Method in class javax.security.enterprise.authentication.mechanism.http.AuthenticationParameters
-
The credential set as parameter in this instance.
- getGroups() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Gets the groups set by a call to notifyContainerAboutLogin().
- getGroups() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getHandler() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the low level Jakarta Authentication handler that the runtime provided when creating this
HttpMessageContext
, and which this context uses to communicate the authentication details to the runtime.
- getHandler() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getIdentityStoreId() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Return the unique ID of the identity store used to validate the credentials.
- getMessageInfo() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the the low level Jakarta Authentication message info instance for the current request.
- getMessageInfo() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getName() - Method in class javax.security.enterprise.CallerPrincipal
-
The name of the caller
- getPassword() - Method in class javax.security.enterprise.credential.UsernamePasswordCredential
-
Determines the password.
- getPasswordAsString() - Method in class javax.security.enterprise.credential.UsernamePasswordCredential
-
Determines the password.
- getPrincipalsByType(Class<T>) - Method in interface javax.security.enterprise.SecurityContext
-
Retrieve all Principals of the given type from the authenticated caller's Subject,
or an empty set if the current caller is not authenticated, or if the specified type
isn't found in the Subject.
- getRequest() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the request object associated with the current request.
- getRequest() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getResponse() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Returns the response object associated with the current request.
- getResponse() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- getStatus() - Method in class javax.security.enterprise.identitystore.CredentialValidationResult
-
Determines the validation status.
- getToken() - Method in class javax.security.enterprise.credential.RememberMeCredential
-
Determines the token value to compare for authentication.
- getValue() - Method in class javax.security.enterprise.credential.Password
-
Determines the password value.
- getWrapped() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- IdentityStore - Interface in javax.security.enterprise.identitystore
-
IdentityStore
is a mechanism for validating a caller's credentials
and accessing a caller's identity attributes.
- IdentityStore.ValidationType - Enum in javax.security.enterprise.identitystore
-
Determines the type of validation (operations) that should be done by this store.
- IdentityStoreHandler - Interface in javax.security.enterprise.identitystore
-
IdentityStoreHandler
is a mechanism for validating a caller's
credentials, and accessing a caller's identity attributes, by consulting
a set of one or more
IdentityStore
s.
- IdentityStorePermission - Class in javax.security.enterprise.identitystore
-
Class for IdentityStore permissions.
- IdentityStorePermission(String) - Constructor for class javax.security.enterprise.identitystore.IdentityStorePermission
-
Create an IdentityStorePermission with the specified name.
- IdentityStorePermission(String, String) - Constructor for class javax.security.enterprise.identitystore.IdentityStorePermission
-
Create an IdentityStorePermission with the specified name.
- initialize(Map<String, String>) - Method in interface javax.security.enterprise.identitystore.PasswordHash
-
Initialize the instance with the parameters it should use to
generate and verify password hashes.
- INVALID_RESULT - Static variable in class javax.security.enterprise.identitystore.CredentialValidationResult
-
- isAuthenticationRequest() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
- isAuthenticationRequest() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- isCallerInRole(String) - Method in interface javax.security.enterprise.SecurityContext
-
Checks whether the authenticated caller is included in the specified logical application "role".
- isCleared() - Method in class javax.security.enterprise.credential.AbstractClearableCredential
-
- isCleared() - Method in interface javax.security.enterprise.credential.Credential
-
Determines whether the credential value has been securely cleared.
- isNewAuthentication() - Method in class javax.security.enterprise.authentication.mechanism.http.AuthenticationParameters
-
Whether a new authentication dialog is required.
- isProtected() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Checks if the currently requested resource is protected or not.
- isProtected() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- isRegisterSession() - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpMessageContext
-
Check if the runtime has been asked to register an authentication session duing the current request.
- isRegisterSession() - Method in class javax.security.enterprise.authentication.mechanism.http.HttpMessageContextWrapper
-
- isRememberMe() - Method in class javax.security.enterprise.authentication.mechanism.http.AuthenticationParameters
-
Whether "remember me" should be used.
- isValid() - Method in interface javax.security.enterprise.credential.Credential
-
Determines whether the credential is valid.
- validate(Credential) - Method in interface javax.security.enterprise.identitystore.IdentityStore
-
Validates the given credential.
- validate(Credential) - Method in interface javax.security.enterprise.identitystore.IdentityStoreHandler
-
Validate the given
Credential
and return the identity and attributes
of the caller it represents.
- validate(RememberMeCredential) - Method in interface javax.security.enterprise.identitystore.RememberMeIdentityStore
-
Validates the given credential.
- validateRequest(HttpServletRequest, HttpServletResponse, HttpMessageContext) - Method in interface javax.security.enterprise.authentication.mechanism.http.HttpAuthenticationMechanism
-
Authenticate an HTTP request.
- validationTypes() - Method in interface javax.security.enterprise.identitystore.IdentityStore
-
Determines the type of validation the
IdentityStore
should be used for.
- valueOf(String) - Static method in enum javax.security.enterprise.AuthenticationStatus
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum javax.security.enterprise.identitystore.CredentialValidationResult.Status
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum javax.security.enterprise.identitystore.IdentityStore.ValidationType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum javax.security.enterprise.identitystore.LdapIdentityStoreDefinition.LdapSearchScope
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum javax.security.enterprise.AuthenticationStatus
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum javax.security.enterprise.identitystore.CredentialValidationResult.Status
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum javax.security.enterprise.identitystore.IdentityStore.ValidationType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum javax.security.enterprise.identitystore.LdapIdentityStoreDefinition.LdapSearchScope
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- verify(char[], String) - Method in interface javax.security.enterprise.identitystore.PasswordHash
-
Verify a password against the hashed password value retrieved from a user's account.