Package pl.edu.icm.unity.engine.api.authn
package pl.edu.icm.unity.engine.api.authn
Authentication related API and utilities
- Author:
- K. Benedyczak
-
ClassDescriptionAbstractCredentialRetrieval<T extends CredentialExchange>Common code for all
CredentialRetrievalimplementations.Common boilerplate forCredentialRetrievalFactoryimplementations.Helper to easily create credential factories.AbstractCredentialVerificatorwith a common boilerplate code.Stores information about authenticated entity during the authentication.Thrown on authentication problem.Stores information about a authentication flow, as configured by administrator and selectable by a user or client.Utility methods processing results of authenticators.Base contract of authentication result - have remote and local authn variants.Describes context of authentication: in which realm it happens (or happened), what flow is used, which option was used and which factor it was which can be 1 or 2 (at least until we start support 3rd factor authn).DTO containing information about a user being authenticated.Describes authenticator configuration.Describes authenticator configuration.Representation of an authenticator instance, which is a composition ofCredentialRetrievalandCredentialVerificator, configured.Describes a configured authenticator instance in implementation agnostic way.Describes authenticator context of authentication: in which realm it happens (or happened), what flow is used, which factor it was which can be 1 or 2 (at least until we start support 3rd factor authn).Provides access to authenticators.Describes an available authenticator type.Thrown when there is authorization problemThrown when there is authorization problem, this is a runtime variant.Marker interface.Thrown when credential being set was recently usedImplementations provide a credential reset functionality.Retrieves credential, using a some binding specific method.Implementations allows for creatingCredentialRetrievals of a particular type.Implementations allow for verification of the provided credential.ProducesCredentialVerificators of a particular type.Counts unsuccessful authentication attempts per client's IP address.Entity and a value of (one of) its credential attributeThis component allows the generic Unity part (not IdP endpoint specific) to obtain information on the IdP login being performed and forcefully cleaning it.Implemented by an IdP endpoint and registered withIdPLoginControllerto inform it about authentications against the IdP.Thrown when credential definition is invalid.Handles authentication results for interactive authentications (typically over some web binding).Used to prevent from session fixation attack.Stores thread-local information about the current request metadata in thread local variable.This class object is returned by local authenticator with information about authentication result.Represents login session.Performs a logout, including logout of additional session participants, in case of logout initiated directly in Unity.Factory ofLogoutProcessors.Provides information about partial state of authentication.Contains information used by remember me functionalityThrown on authentication problem.This class object is returned by authenticator with information about authentication result.Signals an error of too many attempts, e.g.Counts unsuccessful authentication attempts per client's IP address.Counts unsuccessful access attempts per client's IP address.