org.apache.axis.security.servlet

Class ServletSecurityProvider

java.lang.Object

org.apache.axis.security.servlet.ServletSecurityProvider

All Implemented Interfaces:

SecurityProvider

public class ServletSecurityProvider
extends java.lang.Object
implements SecurityProvider

A ServletSecurityProvider, combined with the ServletAuthenticatedUser class, allows the standard servlet security mechanisms (isUserInRole(), etc.) to integrate with Axis' access control mechanism. By utilizing this class (which the AxisServlet can be configured to do automatically), authentication and role information will come from your servlet engine.

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.commons.logging.Log	log

Constructor Summary

Constructors

Constructor and Description
ServletSecurityProvider()

Method Summary

Modifier and Type	Method and Description
AuthenticatedUser	authenticate(MessageContext msgContext) Authenticate a user from a username/password pair.
boolean	userMatches(AuthenticatedUser user, java.lang.String principal) See if a user matches a principal name.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static org.apache.commons.logging.Log log

Constructor Detail

ServletSecurityProvider

public ServletSecurityProvider()

Method Detail

authenticate

public AuthenticatedUser authenticate(MessageContext msgContext)

Authenticate a user from a username/password pair.

Specified by:

authenticate in interface SecurityProvider

Parameters:

username - the user name to check

password - the password to check

Returns:

an AuthenticatedUser or null

userMatches

public boolean userMatches(AuthenticatedUser user,
                           java.lang.String principal)

See if a user matches a principal name. The name might be a user or a group.

Specified by:

userMatches in interface SecurityProvider

Returns:

true if the user matches the passed name