The {@link AuthenticationHandler} is part of the security provider and needs to be registered as an OSGi servide. Client may implement this interface to perform user authentication and to define an authentication scheme. These values will be used later on in a {@link SecurityContext} that is used by the framework to verify authentication.
An {@link AuthenticationHandler} may be used together with an {@link AuthorizationHandler}.
@see SecurityContext @see AuthorizationHandlerAuthenticationHandler
interface defines the service API used by the authentication implementation to support plugin various ways of extracting credentials from the request.
@deprecated use{@link org.apache.sling.auth.core.spi.AuthenticationHandler}instead
Determines that Credentials are valid. Password-based credentials may be tested against an external LDAP, Kerberos, JDBC source. Certificates may be checked against a list of CA's and do the usual chain validation. Implementations must be parameterized with their sources of information.
Callers to this class should first call supports to determine if the AuthenticationHandler can authenticate the credentials provided. @author Scott Battaglia @version $Revision: 14064 $ $Date: 2007-06-10 09:17:55 -0400 (Sun, 10 Jun 2007) $ @since 3.0
This is a published and supported CAS Server 3 API.
Since the authentication process can be stateful, an instance of this class can be stateful too.
Do not share a single instance of this interface if you don't explicitly need to do so.
@author Marco Trevisan
|
|
|
|