Interface STSAuthorizationProvider

All Known Implementing Classes:
DefaultSTSAuthorizationProvider

public interface STSAuthorizationProvider

This interface is a plugin for authorization services to a Security Token Service (STS). The authorization service determines if a requestor can be issued an token to access the target service. The usual services mechanism is used to find implementing class of STSAuthorizationProvider.

Author:
Jiandong Guo
  • Method Summary

    Modifier and Type
    Method
    Description
    boolean
    isAuthorized(Subject subject, String appliesTo, String tokenType, String keyType)
    Returns true if the requestor identified by the Subject can access the the target service.
  • Method Details

    • isAuthorized

      boolean isAuthorized(Subject subject, String appliesTo, String tokenType, String keyType)
      Returns true if the requestor identified by the Subject can access the the target service.
      Parameters:
      subject - The Subject contgaining authentication information and context of the authenticated requestor.
      appliesTo - Identifying target service(s)
      tokenType - Type of token to be issued.
      keyType - Type of key to be issued
      Returns:
      true ot false.