Examples of AuthenticationToken

com.volantis.vdp.scs.authentication.AuthenticationToken
org.apache.accumulo.core.client.security.tokens.AuthenticationToken
@since 1.5.0
org.apache.hadoop.security.authentication.server.AuthenticationToken
The {@link AuthenticationToken} contains information about an authenticatedHTTP client and doubles as the {@link Principal} to be returned byauthenticated {@link HttpServletRequest}s
The token can be serialized/deserialized to and from a string as it is sent and received in HTTP client responses and requests as a HTTP cookie (this is done by the {@link AuthenticationFilter}).
org.apache.shiro.authc.AuthenticationToken

An AuthenticationToken is a consolidation of an account's principals and supporting credentials submitted by a user during an authentication attempt.

The token is submitted to an {@link Authenticator Authenticator} via the{@link Authenticator#authenticate(AuthenticationToken) authenticate(token)} method. TheAuthenticator then executes the authentication/log-in process.

Common implementations of an AuthenticationToken would have username/password pairs, X.509 Certificate, PGP key, or anything else you can think of. The token can be anything needed by an {@link Authenticator} to authenticate properly.

Because applications represent user data and credentials in different ways, implementations of this interface are application-specific. You are free to acquire a user's principals and credentials however you wish (e.g. web form, Swing form, fingerprint identification, etc) and then submit them to the Shiro framework in the form of an implementation of this interface.

If your application's authentication process is username/password based (like most), instead of implementing this interface yourself, take a look at the {@link UsernamePasswordToken UsernamePasswordToken} class, as it is probably sufficient for your needs.

RememberMe services are enabled for a token if they implement a sub-interface of this one, called {@link RememberMeAuthenticationToken RememberMeAuthenticationToken}. Implement that interfac if you need RememberMe services (the UsernamePasswordToken already implements this interface).

If you are familiar with JAAS, an AuthenticationToken replaces the concept of a {@link javax.security.auth.callback.Callback}, and defines meaningful behavior (Callback is just a marker interface, and of little use). We also think the name AuthenticationToken more accurately reflects its true purpose in a login framework, whereas Callback is less obvious. @author Les Hazlewood @see RememberMeAuthenticationToken @see HostAuthenticationToken @see UsernamePasswordToken @since 0.1
org.latexlab.docs.server.auth.AuthenticationToken
Models and stores an AuthSub token.
org.openmhealth.reference.domain.AuthenticationToken

A user's authentication token.

This class is immutable.
@author John Jenkins
org.platformlayer.auth.AuthenticationToken
v7db.auth.AuthenticationToken

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

      Properties props = new Properties();
      for (Entry<String,String> loginOption : loginProps.entrySet())
        props.put(loginOption.getKey(), loginOption.getValue());
      
      try {
        AuthenticationToken token = Class.forName(tokenClassName).asSubclass(AuthenticationToken.class).newInstance();
        token.init(props);
        return token;
      } catch (Exception e) {
        throw new RuntimeException(e);
      }

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

    String authsString = props.getProperty("auths", "_random");
    
    String targetUser = props.getProperty("system");
    String target;
    String authPrincipal;
    AuthenticationToken authToken;
    if ("table".equals(targetUser)) {
      target = WalkingSecurity.get(state).getTabUserName();
      authPrincipal = WalkingSecurity.get(state).getSysUserName();
      authToken = WalkingSecurity.get(state).getSysToken();
    } else {

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

  public void visit(State state, Properties props) throws Exception {
    String target = props.getProperty("target");
    String source = props.getProperty("source");
    
    String principal;
    AuthenticationToken token;
    if (source.equals("system")) {
      principal = WalkingSecurity.get(state).getSysUserName();
      token = WalkingSecurity.get(state).getSysToken();
    } else {
      principal = WalkingSecurity.get(state).getTabUserName();

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

  }
  
  public static void dropTable(State state, Properties props) throws Exception {
    String sourceUser = props.getProperty("source", "system");
    String principal;
    AuthenticationToken token;
    if (sourceUser.equals("table")) {
      principal = WalkingSecurity.get(state).getTabUserName();
      token = WalkingSecurity.get(state).getTabToken();
    } else {
      principal = WalkingSecurity.get(state).getSysUserName();

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

      tabPerm = TablePermission.valueOf(perm);
    String tableName = WalkingSecurity.get(state).getTableName();
    boolean hasPerm = WalkingSecurity.get(state).hasTablePermission(target, tableName, tabPerm);
    boolean canGive;
    String sourceUser;
    AuthenticationToken sourceToken;
    if ("system".equals(sourceUserProp)) {
      sourceUser = WalkingSecurity.get(state).getSysUserName();
      sourceToken = WalkingSecurity.get(state).getSysToken();
    } else if ("table".equals(sourceUserProp)) {
      sourceUser = WalkingSecurity.get(state).getTabUserName();

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

   */
  public static final Credentials deserialize(String serializedForm) {
    String[] split = serializedForm.split(":", 3);
    String principal = split[0].equals("-") ? null : new String(Base64.decodeBase64(split[0]), Constants.UTF8);
    String tokenType = split[1].equals("-") ? null : new String(Base64.decodeBase64(split[1]), Constants.UTF8);
    AuthenticationToken token = null;
    if (!split[2].equals("-")) {
      byte[] tokenBytes = Base64.decodeBase64(split[2]);
      token = AuthenticationTokenSerializer.deserialize(tokenType, tokenBytes);
    }
    return new Credentials(principal, token);

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken

      String principal = opts.principal;
      if (principal == null) {
        principal = getConsoleReader().readLine("Username (aka principal): ");
      }
      
      AuthenticationToken token = Class.forName(opts.tokenClassName).asSubclass(AuthenticationToken.class).newInstance();
      Properties props = new Properties();
      for (TokenProperty tp : token.getProperties()) {
        String input;
        if (pass != null && tp.getKey().equals("password")) {
          input = pass.toString();
        } else {
          if (tp.getMask()) {
            input = getConsoleReader().readLine(tp.getDescription() + ": ", '*');
          } else {
            input = getConsoleReader().readLine(tp.getDescription() + ": ");
          }
        }
        props.put(tp.getKey(), input);
        token.init(props);
      }
      String tokenBase64 = Base64.encodeBase64String(AuthenticationTokenSerializer.serialize(token));
      
      String tokenFile = opts.tokenFile;
      if (tokenFile == null) {

View Full Code Here

Examples of org.apache.accumulo.core.client.security.tokens.AuthenticationToken


  public void changePassword(TCredentials credentials, Credentials toChange) throws ThriftSecurityException {
    if (!canChangePassword(credentials, toChange.getPrincipal()))
      throw new ThriftSecurityException(credentials.getPrincipal(), SecurityErrorCode.PERMISSION_DENIED);
    try {
      AuthenticationToken token = toChange.getToken();
      authenticator.changePassword(toChange.getPrincipal(), token);
      log.info("Changed password for user " + toChange.getPrincipal() + " at the request of user " + credentials.getPrincipal());
    } catch (AccumuloSecurityException e) {
      throw e.asThriftException();
    }

View Full Code Here

Examples of org.apache.hadoop.security.authentication.server.AuthenticationToken


        String userName = request.getHeader("Remote-User");
        if (StringUtils.isEmpty(userName)) {
            return super.authenticate(request, response);
        } else {
            return new AuthenticationToken(userName, userName, getType());
        }
    }

View Full Code Here

Examples of org.apache.hadoop.security.authentication.server.AuthenticationToken

   */
  @Override
  public AuthenticationToken authenticate(HttpServletRequest request,
      HttpServletResponse response) throws IOException, AuthenticationException {


    AuthenticationToken token;
    String delegationParam = this.getEncodedDelegationTokenFromRequest(request);
    if (delegationParam != null) {
      Token<RMDelegationTokenIdentifier> dt =
          new Token<RMDelegationTokenIdentifier>();
      ;
      dt.decodeFromUrlString(delegationParam);
      UserGroupInformation ugi = this.verifyToken(dt);
      if (ugi == null) {
        throw new AuthenticationException("Invalid token");
      }
      final String shortName = ugi.getShortUserName();
      token = new AuthenticationToken(shortName, ugi.getUserName(), getType());
    } else {
      token = super.authenticate(request, response);
      if (token != null) {
        // create a token with auth type set correctly
        token =
            new AuthenticationToken(token.getUserName(), token.getName(),
              super.getType());
      }
    }
    return token;
  }

View Full Code Here

0 1 2 3 4 5

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.