Package pl.edu.icm.unity.engine.api.authn
package pl.edu.icm.unity.engine.api.authn
Authentication related API and utilities
- Author:
- K. Benedyczak
-
ClassDescriptionAbstractCredentialRetrieval<T extends CredentialExchange>Common code for all
CredentialRetrieval
implementations.Common boilerplate forCredentialRetrievalFactory
implementations.Helper to easily create credential factories.AbstractCredentialVerificator
with a common boilerplate code.Stores information about authenticated entity during the authentication.Thrown on authentication problem.Stores information about a authentication flow, as configured by administrator and selectable by a user or client.Utility methods processing results of authenticators.Base contract of authentication result - have remote and local authn variants.Describes context of authentication: in which realm it happens (or happened), what flow is used, which option was used and which factor it was which can be 1 or 2 (at least until we start support 3rd factor authn).DTO containing information about a user being authenticated.Representation of an authenticator instance, which is a composition ofCredentialRetrieval
andCredentialVerificator
, configured.Describes authenticator context of authentication: in which realm it happens (or happened), what flow is used, which factor it was which can be 1 or 2 (at least until we start support 3rd factor authn).Provides access to authenticators.Marker interface.Implementations provide a credential reset functionality.Retrieves credential, using a some binding specific method.Implementations allows for creatingCredentialRetrieval
s of a particular type.Implementations allow for verification of the provided credential.ProducesCredentialVerificator
s of a particular type.Counts unsuccessful authentication attempts per client's IP address.Entity and a value of (one of) its credential attributeThis component allows the generic Unity part (not IdP endpoint specific) to obtain information on the IdP login being performed and forcefully cleaning it.Implemented by an IdP endpoint and registered withIdPLoginController
to inform it about authentications against the IdP.Handles authentication results for interactive authentications (typically over some web binding).Used to prevent from session fixation attack.Stores thread-local information about the current request metadata in thread local variable.This class object is returned by local authenticator with information about authentication result.Represents login session.Performs a logout, including logout of additional session participants, in case of logout initiated directly in Unity.Factory ofLogoutProcessor
s.Provides information about partial state of authentication.Contains information used by remember me functionalityThrown on authentication problem.This class object is returned by authenticator with information about authentication result.Counts unsuccessful authentication attempts per client's IP address.