Examples of io.undertow.security.impl.SimpleNonceManager

io.undertow.security.impl.SimpleNonceManager
A default {@link io.undertow.security.api.NonceManager} implementation to provide reasonable single host management of nonces.This {@link io.undertow.security.api.NonceManager} manages nonces in two groups, the first is the group that are allocated to new requests, this groupis a problem as we want to be able to limit how many we distribute so we don't have a DOS storing too many but we also don't a high number of requests to to push the other valid nonces out faster than they can be used. The second group is the set of nonces actively in use - these should be maintained as we can also maintain the nonce count and even track the next nonce once invalid. Maybe group one should be a timestamp and private key hashed together, if used with a nonce count they move to be tracked to ensure the same count is not used again - if successfully used without a nonce count add to a blacklist until expiration? A nonce used without a nonce count will essentially be single use with each request getting a new nonce. @author Darran Lofthouse

    private static final String REALM_NAME = "Digest_Realm";
    private static final String ZERO = "00000000";


    static AuthenticationMechanism getTestMechanism() {
        return new DigestAuthenticationMechanism(Collections.singletonList(DigestAlgorithm.MD5),
                Collections.singletonList(DigestQop.AUTH), REALM_NAME, "/", new SimpleNonceManager());
    }

View Full Code Here


    @Override
    protected List<AuthenticationMechanism> getTestMechanisms() {
        List<DigestQop> qopList = Collections.emptyList();
        AuthenticationMechanism mechanism = new DigestAuthenticationMechanism(Collections.singletonList(DigestAlgorithm.MD5),
                qopList, REALM_NAME, "/", new SimpleNonceManager());


        return Collections.singletonList(mechanism);
    }

View Full Code Here


    @Override
    protected List<AuthenticationMechanism> getTestMechanisms() {
        List<DigestQop> qopList = Collections.emptyList();
        AuthenticationMechanism mechanism = new DigestAuthenticationMechanism(Collections.singletonList(DigestAlgorithm.MD5),
                qopList, REALM_NAME, "/", new SimpleNonceManager());


        return Collections.singletonList(mechanism);
    }

View Full Code Here

    private static final String REALM_NAME = "Digest_Realm";
    private static final String ZERO = "00000000";


    static AuthenticationMechanism getTestMechanism() {
        return new DigestAuthenticationMechanism(Collections.singletonList(DigestAlgorithm.MD5),
                Collections.singletonList(DigestQop.AUTH), REALM_NAME, "/", new SimpleNonceManager());
    }

View Full Code Here

TOP

Related Classes of io.undertow.security.impl.SimpleNonceManager

io.undertow.server.security.DigestAuthentication2069TestCase

io.undertow.server.security.DigestAuthenticationAuthTestCase

org.xnio.XnioExecutor

java.nio.ByteBuffer

java.util.Random

java.security.SecureRandom

java.security.MessageDigest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.