All Classes and Interfaces

Class
Description
AbstractLoginService Base class for LoginServices that allows subclasses to provide the user authentication and authorization information, but provides common behaviour such as handling authentication.
AbstractUserAuthentication Base class for representing an authenticated user.
Authenticator Interface
Authenticator Configuration
Authenticator Factory
A service to query for user roles.
 
Deprecated.
A LoginAuthenticator that uses SPNEGO and the GSS API to authenticate requests.
A configurable (as opposed to using system properties) SPNEGO LoginService.
 
 
ConstraintSecurityHandler
The Default Authenticator Factory.
Default Identity Service implementation.
The default implementation of UserIdentity.
 
The nonce max age in ms can be set with the SecurityHandler.setInitParameter(String, String) using the name "maxNonceAge".
LoginService implementation which always denies any attempt to login.
FORM Authenticator.
This Authentication represents a just completed Form authentication.
 
 
An implementation of a LoginService that stores users and roles in-memory in HashMaps.
Associates UserIdentities from with threads and UserIdentity.Contexts.
JDBC as a source of user authentication and authorization information.
LoggedOutAuthentication An Authentication indicating that a user has been previously, but is not currently logged in, but may be capable of logging in after a call to Request.login(String,String)
 
This is similar to the jaspi PasswordValidationCallback but includes user principal and group info as well.
This is similar to the jaspi PasswordValidationCallback but includes user principal and group info as well.
Login Service Interface.
This class monitors a property file of the format mentioned below and notifies registered listeners of the changes to the the given file.
 
RoleInfo Badly named class that holds the role and user data constraint info for a path/http method combination, extracted and combined from security constraints.
RolePrincipal Represents a role.
 
marker interface for run-as-role tokens
Abstract SecurityHandler.
 
SessionAuthentication When a user has been successfully authenticated with some types of Authenticator, the Authenticator stashes a SessionAuthentication into an HttpSession to remember that the user is authenticated.
 
 
CLIENT-CERT authenticator.
 
 
UserPrincipal Represents a user with a credential.
Store of user authentication and authorization information.