Changeset 1139
- Timestamp:
- 2009-03-11 12:29:07 (4 years ago)
- Location:
- trunk
- Files:
-
- 11 edited
- 7 moved
-
modules/kauri-security/kauri-security-api/src/main/java/org/kauriproject/security/AuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-api/src/main/java/org/kauriproject/security/AuthenticationMechanism.java) (3 diffs)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/AbstractAuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/AbstractAuthenticationMechanism.java) (2 diffs)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BasicAuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BasicAuthenticationMechanism.java) (1 diff)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BelgianEidAuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BelgianEidAuthenticationMechanism.java) (4 diffs)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/DigestAuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/DigestAuthenticationMechanism.java) (1 diff)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/FormAuthenticationMethod.java (moved) (moved from trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/FormAuthenticationMechanism.java) (2 diffs)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/LoginRestlet.java (modified) (1 diff)
-
modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/LogoutRestlet.java (modified) (1 diff)
-
modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/AuthenticationMethodEntry.java (moved) (moved from trunk/modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/AuthenticationMechanismEntry.java) (1 diff)
-
modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/RealmImpl.java (modified) (6 diffs)
-
modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/RealmsBuilder.java (modified) (3 diffs)
-
modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/SecurityFilter.java (modified) (8 diffs)
-
modules/kauri-security/kauri-security-impl/src/test/confs/securitytest/security/auth.xml (modified) (6 diffs)
-
modules/kauri-security/kauri-security-impl/src/test/java/org/kauriproject/security/test/SecurityTest.java (modified) (1 diff)
-
modules/kauri-security/kauri-security-impl/src/test/modulesrc/org/kauriproject/security/test/testmodules/security/KAURI-INF/spring/services.xml (modified) (2 diffs)
-
samples/kauri-security-sample/conf/security/auth.xml (modified) (6 diffs)
-
samples/kauri-security-sample/src/main/kauri/pages/index.html.xml (modified) (1 diff)
-
samples/kauri-security-sample/src/main/kauri/spring/services.xml (modified) (4 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/modules/kauri-security/kauri-security-api/src/main/java/org/kauriproject/security/AuthenticationMethod.java
r1137 r1139 24 24 * This interface covers the protocol-specific part of authentication: 25 25 * extracting the authentication details (e.g. username and password) from 26 * the request .26 * the request and sending a challenge. 27 27 * 28 28 * <p>It does not concern itself with validating that the the authentication … … 36 36 * various *ProcessingFitlers and ProcessingFilterEntryPoints. 37 37 */ 38 public interface AuthenticationMe chanism{38 public interface AuthenticationMethod { 39 39 40 40 /** … … 54 54 * Creates a challenge (e.g. by setting a ChallengeResponse or redirecting or rendering a login form). 55 55 * 56 * <p>If the authentication me chanismis incapable of sending a challenge, an56 * <p>If the authentication method is incapable of sending a challenge, an 57 57 * UnsupportedOperationException may be thrown 58 58 * -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/AbstractAuthenticationMethod.java
r1138 r1139 16 16 package org.kauriproject.security.providers; 17 17 18 import org.kauriproject.security.AuthenticationMe chanism;18 import org.kauriproject.security.AuthenticationMethod; 19 19 import org.kauriproject.security.Realm; 20 20 import org.restlet.data.Request; … … 22 22 import org.springframework.security.Authentication; 23 23 24 public abstract class AbstractAuthenticationMe chanism implements AuthenticationMechanism{24 public abstract class AbstractAuthenticationMethod implements AuthenticationMethod { 25 25 26 26 abstract public Authentication getAuthentication(Request request, Response response, Realm realm); -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BasicAuthenticationMethod.java
r1138 r1139 27 27 import org.springframework.security.providers.UsernamePasswordAuthenticationToken; 28 28 29 public class BasicAuthenticationMe chanism extends AbstractAuthenticationMechanism{29 public class BasicAuthenticationMethod extends AbstractAuthenticationMethod { 30 30 31 31 public Authentication getAuthentication(Request request, Response response, Realm realm) throws AuthenticationException { -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/BelgianEidAuthenticationMethod.java
r1138 r1139 1 1 package org.kauriproject.security.providers; 2 2 3 import org.kauriproject.security.AuthenticationMe chanism;3 import org.kauriproject.security.AuthenticationMethod; 4 4 import org.kauriproject.security.Realm; 5 5 import org.kauriproject.util.restlet.ResponseUtil; … … 18 18 import java.util.ArrayList; 19 19 import java.util.Map; 20 import java.util.HashMap;21 20 import java.io.ByteArrayOutputStream; 22 21 import java.io.ByteArrayInputStream; … … 24 23 25 24 /** 26 * Belgian eID authentication me chanism.25 * Belgian eID authentication method. 27 26 * 28 27 * <p>See http://eid.belgium.be/ … … 34 33 * name is subject to specific laws. 35 34 */ 36 public class BelgianEidAuthenticationMe chanism implements AuthenticationMechanism, InitializingBean {35 public class BelgianEidAuthenticationMethod implements AuthenticationMethod, InitializingBean { 37 36 private BelgianEidPrincipalExtractor principalExtractor; 38 37 private String challengePage; -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/DigestAuthenticationMethod.java
r1138 r1139 54 54 * http://www.acegisecurity.org/acegi-security/xref/org/acegisecurity/ui/digestauth/DigestProcessingFilter.html 55 55 */ 56 public class DigestAuthenticationMe chanism extends AbstractAuthenticationMechanism{57 58 private static final Log logger = LogFactory.getLog(DigestAuthenticationMe chanism.class);56 public class DigestAuthenticationMethod extends AbstractAuthenticationMethod { 57 58 private static final Log logger = LogFactory.getLog(DigestAuthenticationMethod.class); 59 59 60 60 private Random random = new Random(); -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/FormAuthenticationMethod.java
r1138 r1139 23 23 import org.kauriproject.runtime.rapi.KauriModule; 24 24 25 public class FormAuthenticationMe chanism extends AbstractAuthenticationMechanismimplements InitializingBean {25 public class FormAuthenticationMethod extends AbstractAuthenticationMethod implements InitializingBean { 26 26 27 27 private KauriModule kauriModule; … … 29 29 private PreAuthenticatedAuthenticationTokenStore preAuthTokenStore = null; 30 30 31 public FormAuthenticationMe chanism(KauriModule kauriModule) {31 public FormAuthenticationMethod(KauriModule kauriModule) { 32 32 this.kauriModule = kauriModule; 33 33 } -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/LoginRestlet.java
r1128 r1139 30 30 31 31 /** 32 * The LoginRestlet implements the login-form for the {@link FormAuthenticationMe chanism}.32 * The LoginRestlet implements the login-form for the {@link FormAuthenticationMethod}. 33 33 */ 34 34 public class LoginRestlet extends LoginLogoutBaseRestlet { -
trunk/modules/kauri-security/kauri-security-auth-methods/src/main/java/org/kauriproject/security/providers/LogoutRestlet.java
r1128 r1139 24 24 25 25 /** 26 * The LogoutRestlet implements the logout-form for the {@link FormAuthenticationMe chanism}.26 * The LogoutRestlet implements the logout-form for the {@link FormAuthenticationMethod}. 27 27 */ 28 28 public class LogoutRestlet extends LoginLogoutBaseRestlet { -
trunk/modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/AuthenticationMethodEntry.java
r1137 r1139 1 1 package org.kauriproject.security.infrastructure; 2 2 3 import org.kauriproject.security.AuthenticationMe chanism;3 import org.kauriproject.security.AuthenticationMethod; 4 4 5 public class AuthenticationMe chanismEntry {6 private AuthenticationMe chanism mechanism;5 public class AuthenticationMethodEntry { 6 private AuthenticationMethod method; 7 7 private int strength; 8 8 9 public AuthenticationMe chanismEntry(AuthenticationMechanism mechanism, int strength) {10 this.me chanism = mechanism;9 public AuthenticationMethodEntry(AuthenticationMethod method, int strength) { 10 this.method = method; 11 11 this.strength = strength; 12 12 } 13 13 14 public AuthenticationMe chanismget() {15 return me chanism;14 public AuthenticationMethod get() { 15 return method; 16 16 } 17 17 -
trunk/modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/RealmImpl.java
r1104 r1139 18 18 import java.util.List; 19 19 20 import org.kauriproject.security.AuthenticationMe chanism;20 import org.kauriproject.security.AuthenticationMethod; 21 21 import org.kauriproject.security.Realm; 22 22 import org.springframework.security.AccessDecisionManager; … … 26 26 public class RealmImpl implements Realm { 27 27 private String name; 28 private List<AuthenticationMe chanismEntry> authenticationMechanisms;28 private List<AuthenticationMethodEntry> authenticationMethods; 29 29 private AuthenticationManager authenticationManager; 30 30 private AccessDecisionManager accessDecisionManager; … … 32 32 33 33 public RealmImpl(String name, ObjectDefinitionSource objectDefinitionSource, 34 List<AuthenticationMe chanismEntry> authenticationMechanisms, AuthenticationManager authenticationManager,34 List<AuthenticationMethodEntry> authenticationMethods, AuthenticationManager authenticationManager, 35 35 AccessDecisionManager accessDecisionManager) { 36 36 this.name = name; 37 37 this.objectDefinitionSource = objectDefinitionSource; 38 this.authenticationMe chanisms = authenticationMechanisms;38 this.authenticationMethods = authenticationMethods; 39 39 this.authenticationManager = authenticationManager; 40 40 this.accessDecisionManager = accessDecisionManager; … … 45 45 } 46 46 47 public List<AuthenticationMe chanismEntry> getAuthenticationMechanisms() {48 return authenticationMe chanisms;47 public List<AuthenticationMethodEntry> getAuthenticationMethods() { 48 return authenticationMethods; 49 49 } 50 50 … … 62 62 63 63 /** 64 * Returns the weakest AuthenticationMe chanismfor which the the strength is64 * Returns the weakest AuthenticationMethod for which the the strength is 65 65 * >= the requested strength, or null if there is no such entry. 66 66 */ 67 public AuthenticationMe chanism getAuthenticationMechanismForStrength(int strength) {68 AuthenticationMe chanismEntry strongEnoughEntry = null;67 public AuthenticationMethod getAuthenticationMethodForStrength(int strength) { 68 AuthenticationMethodEntry strongEnoughEntry = null; 69 69 70 for (AuthenticationMe chanismEntry entry : authenticationMechanisms) {70 for (AuthenticationMethodEntry entry : authenticationMethods) { 71 71 if (entry.getStrength() >= strength) { 72 72 if (strongEnoughEntry == null) … … 80 80 } 81 81 82 public AuthenticationMe chanism getDefaultAuthenticationMechanism() {83 return authenticationMe chanisms.get(authenticationMechanisms.size() - 1).get();82 public AuthenticationMethod getDefaultAuthenticationMethod() { 83 return authenticationMethods.get(authenticationMethods.size() - 1).get(); 84 84 } 85 85 -
trunk/modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/RealmsBuilder.java
r1109 r1139 20 20 import org.kauriproject.conf.Conf; 21 21 import org.kauriproject.conf.ConfException; 22 import org.kauriproject.security.AuthenticationMe chanism;22 import org.kauriproject.security.AuthenticationMethod; 23 23 import org.kauriproject.runtime.rapi.KauriModule; 24 24 import org.springframework.security.*; … … 60 60 } 61 61 62 List<Conf> authMechConfs = realmConf.getRequiredChild("authenticationMe chanisms").getChildren("authenticationMechanism");63 List<AuthenticationMe chanismEntry> authMechs = new ArrayList<AuthenticationMechanismEntry>();62 List<Conf> authMechConfs = realmConf.getRequiredChild("authenticationMethods").getChildren("authenticationMethod"); 63 List<AuthenticationMethodEntry> authMethods = new ArrayList<AuthenticationMethodEntry>(); 64 64 for (Conf authMechConf : authMechConfs) { 65 65 int strength = authMechConf.getAttributeAsInteger("strength", 0); 66 AuthenticationMe chanism mechanism = getBean(authMechConf, AuthenticationMechanism.class, module);67 authMe chs.add(new AuthenticationMechanismEntry(mechanism, strength));66 AuthenticationMethod method = getBean(authMechConf, AuthenticationMethod.class, module); 67 authMethods.add(new AuthenticationMethodEntry(method, strength)); 68 68 } 69 69 … … 74 74 AccessDecisionManager.class, module); 75 75 76 RealmImpl realm = new RealmImpl(name, objectDefinitionSource, authMe chs, authenticationManager, accessDecisionManager);76 RealmImpl realm = new RealmImpl(name, objectDefinitionSource, authMethods, authenticationManager, accessDecisionManager); 77 77 78 78 realms.add(realm); -
trunk/modules/kauri-security/kauri-security-impl/src/main/java/org/kauriproject/security/infrastructure/SecurityFilter.java
r1126 r1139 24 24 25 25 import org.kauriproject.runtime.rapi.KauriModule; 26 import org.kauriproject.security.AuthenticationMe chanism;26 import org.kauriproject.security.AuthenticationMethod; 27 27 import org.kauriproject.security.RestserviceInvocation; 28 28 import org.kauriproject.security.MalformedAuthenticationRequestException; … … 85 85 Authentication existingAuthToken = SecurityContextHolder.getContext().getAuthentication(); 86 86 Authentication authToken = null; 87 AuthenticationMe chanismEntry selectedAuthMechanism= null;87 AuthenticationMethodEntry selectedAuthMethod = null; 88 88 89 89 if (existingAuthToken == null) { 90 90 // 91 // Look for authentication information on the request by querying all authentication me chanisms91 // Look for authentication information on the request by querying all authentication methods 92 92 // 93 93 94 for (AuthenticationMe chanismEntry authenticationMechanism : filterContext.realm.getAuthenticationMechanisms()) {94 for (AuthenticationMethodEntry authenticationMethod : filterContext.realm.getAuthenticationMethods()) { 95 95 try { 96 authToken = authenticationMe chanism.get().getAuthentication(request, response, filterContext.realm);96 authToken = authenticationMethod.get().getAuthentication(request, response, filterContext.realm); 97 97 } catch (AuthenticationException ae) { 98 return handleException(request, response, authToken, authenticationMe chanism.get(), ae, filterContext);98 return handleException(request, response, authToken, authenticationMethod.get(), ae, filterContext); 99 99 } 100 100 101 101 if (authToken != null) { 102 selectedAuthMe chanism = authenticationMechanism;102 selectedAuthMethod = authenticationMethod; 103 103 break; 104 104 } … … 110 110 } 111 111 112 // If strength is not great enough, send a challenge for an appropriate auth me chanism113 if (selectedAuthMe chanism.getStrength() < filterContext.requiredStrength) {112 // If strength is not great enough, send a challenge for an appropriate auth method 113 if (selectedAuthMethod.getStrength() < filterContext.requiredStrength) { 114 114 return sendChallenge(request, response, filterContext, "stronger-authentication-required"); 115 115 } … … 124 124 } 125 125 } catch (AuthenticationException ae) { 126 return handleException(request, response, authToken, selectedAuthMe chanism.get(), ae, filterContext);126 return handleException(request, response, authToken, selectedAuthMethod.get(), ae, filterContext); 127 127 } 128 128 } else { … … 146 146 filterContext.realm.getAccessDecisionManager().decide(authToken, filterContext.invocation, filterContext.configAttrDef); 147 147 } catch (AccessDeniedException ade) { 148 return handleException(request, response, authToken, selectedAuthMe chanism.get(), ade, filterContext);148 return handleException(request, response, authToken, selectedAuthMethod.get(), ade, filterContext); 149 149 } catch (AuthenticationException ae) { 150 return handleException(request, response, authToken, selectedAuthMe chanism.get(), ae, filterContext);150 return handleException(request, response, authToken, selectedAuthMethod.get(), ae, filterContext); 151 151 } 152 152 … … 215 215 216 216 private int sendChallenge(Request request, Response response, SecurityFilterContext filterContext, String reason) { 217 AuthenticationMe chanism mechanism = filterContext.realm.getAuthenticationMechanismForStrength(217 AuthenticationMethod method = filterContext.realm.getAuthenticationMethodForStrength( 218 218 filterContext.requiredStrength); 219 219 220 if (me chanism== null) {221 String message = String.format("No authentication me chanismavailable with sufficient strength (%s) in realm %s.",220 if (method == null) { 221 String message = String.format("No authentication method available with sufficient strength (%s) in realm %s.", 222 222 filterContext.requiredStrength, filterContext.realm.getName()); 223 223 throw new RuntimeException(message); 224 224 } 225 225 226 me chanism.challenge(request, response, filterContext.realm, reason);226 method.challenge(request, response, filterContext.realm, reason); 227 227 228 228 return Filter.STOP; … … 230 230 231 231 private int handleException(Request request, Response response, Authentication authToken, 232 AuthenticationMe chanism authMechanism, Exception exception, SecurityFilterContext filterContext) {232 AuthenticationMethod authMethod, Exception exception, SecurityFilterContext filterContext) { 233 233 if (exception instanceof MalformedAuthenticationRequestException) { 234 234 response.setStatus(Status.CLIENT_ERROR_BAD_REQUEST, exception, exception.getMessage()); 235 235 } else if (exception instanceof AuthenticationException) { 236 if (authMe chanism.isRechallengeEnabled()) {237 authMe chanism.challenge(request, response, filterContext.realm, null); // 401236 if (authMethod.isRechallengeEnabled()) { 237 authMethod.challenge(request, response, filterContext.realm, null); // 401 238 238 } else { 239 239 response.setStatus(Status.CLIENT_ERROR_FORBIDDEN, exception); … … 241 241 } else if (exception instanceof AccessDeniedException) { 242 242 if (authToken != null && authenticationTrustResolver.isAnonymous(authToken)) { 243 authMe chanism.challenge(request, response, filterContext.realm, null);243 authMethod.challenge(request, response, filterContext.realm, null); 244 244 } else { 245 245 response.setStatus(Status.CLIENT_ERROR_FORBIDDEN, exception); -
trunk/modules/kauri-security/kauri-security-impl/src/test/confs/securitytest/security/auth.xml
r1104 r1139 4 4 5 5 <realm name="basic"> 6 <authenticationMe chanisms>7 <authenticationMe chanism moduleId="securitytest" beanId="basicAuthMechanism"/>8 </authenticationMe chanisms>6 <authenticationMethods> 7 <authenticationMethod moduleId="securitytest" beanId="basicAuthMethod"/> 8 </authenticationMethods> 9 9 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 10 10 <accessDecisionManager moduleId="securitytest" beanId="accessDecisionManager"/> … … 16 16 17 17 <realm name="digest"> 18 <authenticationMe chanisms>19 <authenticationMe chanism moduleId="securitytest" beanId="digestAuthMechanism"/>20 </authenticationMe chanisms>18 <authenticationMethods> 19 <authenticationMethod moduleId="securitytest" beanId="digestAuthMethod"/> 20 </authenticationMethods> 21 21 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 22 22 <accessDecisionManager moduleId="securitytest" beanId="accessDecisionManager"/> … … 28 28 29 29 <realm name="cookie-based"> 30 <authenticationMe chanisms>31 <authenticationMe chanism moduleId="securitytest" beanId="formAuthMechanism"/>32 </authenticationMe chanisms>30 <authenticationMethods> 31 <authenticationMethod moduleId="securitytest" beanId="formAuthMethod"/> 32 </authenticationMethods> 33 33 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 34 34 <accessDecisionManager moduleId="securitytest" beanId="accessDecisionManager"/> … … 40 40 41 41 <realm name="customdefsource"> 42 <authenticationMe chanisms>43 <authenticationMe chanism moduleId="securitytest" beanId="basicAuthMechanism"/>44 </authenticationMe chanisms>42 <authenticationMethods> 43 <authenticationMethod moduleId="securitytest" beanId="basicAuthMethod"/> 44 </authenticationMethods> 45 45 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 46 46 <accessDecisionManager moduleId="securitytest" beanId="customDecisionManager"/> … … 49 49 50 50 <realm name="patterns"> 51 <authenticationMe chanisms>52 <authenticationMe chanism moduleId="securitytest" beanId="basicAuthMechanism"/>53 </authenticationMe chanisms>51 <authenticationMethods> 52 <authenticationMethod moduleId="securitytest" beanId="basicAuthMethod"/> 53 </authenticationMethods> 54 54 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 55 55 <accessDecisionManager moduleId="securitytest" beanId="accessDecisionManager"/> … … 62 62 63 63 <realm name="strengths"> 64 <authenticationMe chanisms>65 <authenticationMe chanism moduleId="securitytest" beanId="basicAuthMechanism" strength="1"/>66 <authenticationMe chanism moduleId="securitytest" beanId="digestAuthMechanism" strength="2"/>67 </authenticationMe chanisms>64 <authenticationMethods> 65 <authenticationMethod moduleId="securitytest" beanId="basicAuthMethod" strength="1"/> 66 <authenticationMethod moduleId="securitytest" beanId="digestAuthMethod" strength="2"/> 67 </authenticationMethods> 68 68 <authenticationManager moduleId="securitytest" beanId="authenticationManager"/> 69 69 <accessDecisionManager moduleId="securitytest" beanId="accessDecisionManager"/> -
trunk/modules/kauri-security/kauri-security-impl/src/test/java/org/kauriproject/security/test/SecurityTest.java
r1104 r1139 163 163 doTestBasic(externalPrefix, "/strengths/strength2", externalSuffix, USER, USERPW, 401); 164 164 doTestDigest(externalPrefix, "/strengths/strength2", externalSuffix, USER, USERPW, 200); 165 // there's no me chanismwith strength 3165 // there's no method with strength 3 166 166 doTestBasic(externalPrefix, "/strengths/strength3", externalSuffix, USER, USERPW, 500); 167 167 } -
trunk/modules/kauri-security/kauri-security-impl/src/test/modulesrc/org/kauriproject/security/test/testmodules/security/KAURI-INF/spring/services.xml
r1128 r1139 81 81 </bean> 82 82 83 <bean id="basicAuthMe chanism" class="org.kauriproject.security.providers.BasicAuthenticationMechanism"/>83 <bean id="basicAuthMethod" class="org.kauriproject.security.providers.BasicAuthenticationMethod"/> 84 84 85 <bean id="digestAuthMe chanism" class="org.kauriproject.security.providers.DigestAuthenticationMechanism">85 <bean id="digestAuthMethod" class="org.kauriproject.security.providers.DigestAuthenticationMethod"> 86 86 <property name="userDetailsService" ref="userDetailsService"/> 87 87 </bean> … … 90 90 </bean> 91 91 92 <bean id="formAuthMe chanism" class="org.kauriproject.security.providers.FormAuthenticationMechanism">92 <bean id="formAuthMethod" class="org.kauriproject.security.providers.FormAuthenticationMethod"> 93 93 <constructor-arg ref="module"/> 94 94 <property name="preAuthTokenStore" ref="preAuthTokenStore"/> -
trunk/samples/kauri-security-sample/conf/security/auth.xml
r1118 r1139 5 5 <!-- Simple basic authentication sample --> 6 6 <realm name="realm1"> 7 <authenticationMe chanisms>8 <authenticationMe chanism moduleId="samples.security" beanId="basicAuthMechanism"/>9 </authenticationMe chanisms>7 <authenticationMethods> 8 <authenticationMethod moduleId="samples.security" beanId="basicAuthMethod"/> 9 </authenticationMethods> 10 10 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 11 11 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> … … 18 18 <!-- Simple digest authentication sample --> 19 19 <realm name="realm2"> 20 <authenticationMe chanisms>21 <authenticationMe chanism moduleId="samples.security" beanId="digestAuthMechanism"/>22 </authenticationMe chanisms>20 <authenticationMethods> 21 <authenticationMethod moduleId="samples.security" beanId="digestAuthMethod"/> 22 </authenticationMethods> 23 23 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 24 24 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> … … 31 31 <!-- Form authentication sample --> 32 32 <realm name="realm3"> 33 <authenticationMe chanisms>34 <authenticationMe chanism moduleId="samples.security" beanId="formAuthMechanism"/>35 </authenticationMe chanisms>33 <authenticationMethods> 34 <authenticationMethod moduleId="samples.security" beanId="formAuthMethod"/> 35 </authenticationMethods> 36 36 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 37 37 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> … … 46 46 </realm> 47 47 48 <!-- Auth me chanismstrength sample -->48 <!-- Auth method strength sample --> 49 49 <realm name="realm4"> 50 <authenticationMe chanisms>51 <authenticationMe chanism moduleId="samples.security" beanId="basicAuthMechanism" strength="1"/>52 <authenticationMe chanism moduleId="samples.security" beanId="digestAuthMechanism" strength="2"/>53 </authenticationMe chanisms>50 <authenticationMethods> 51 <authenticationMethod moduleId="samples.security" beanId="basicAuthMethod" strength="1"/> 52 <authenticationMethod moduleId="samples.security" beanId="digestAuthMethod" strength="2"/> 53 </authenticationMethods> 54 54 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 55 55 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> … … 62 62 <!-- Second form authentication sample --> 63 63 <realm name="realm5"> 64 <authenticationMe chanisms>65 <authenticationMe chanism moduleId="samples.security" beanId="formAuthMechanism2"/>66 </authenticationMe chanisms>64 <authenticationMethods> 65 <authenticationMethod moduleId="samples.security" beanId="formAuthMethod2"/> 66 </authenticationMethods> 67 67 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 68 68 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> … … 75 75 <!-- Belgian eID sample --> 76 76 <realm name="realm6"> 77 <authenticationMe chanisms>78 <authenticationMe chanism moduleId="samples.security" beanId="beidAuthMechanism"/>79 </authenticationMe chanisms>77 <authenticationMethods> 78 <authenticationMethod moduleId="samples.security" beanId="beidAuthMethod"/> 79 </authenticationMethods> 80 80 <authenticationManager moduleId="samples.security" beanId="authenticationManager"/> 81 81 <accessDecisionManager moduleId="samples.security" beanId="accessDecisionManager"/> -
trunk/samples/kauri-security-sample/src/main/kauri/pages/index.html.xml
r1119 r1139 59 59 <h3>Realm 4 : authentication strengths</h3> 60 60 61 <p>A realm can be associated with multiple authentication me chanisms. Each authentication62 me chanismcan be assigned a strength, and resource can require a certain strength to61 <p>A realm can be associated with multiple authentication methods. Each authentication 62 method can be assigned a strength, and resource can require a certain strength to 63 63 access them. For example, more sensitive resources could require login using client 64 64 certificates (such as Belgian eID).</p> -
trunk/samples/kauri-security-sample/src/main/kauri/spring/services.xml
r1128 r1139 114 114 </bean> 115 115 116 <bean id="basicAuthMe chanism" class="org.kauriproject.security.providers.BasicAuthenticationMechanism"/>116 <bean id="basicAuthMethod" class="org.kauriproject.security.providers.BasicAuthenticationMethod"/> 117 117 118 <bean id="digestAuthMe chanism" class="org.kauriproject.security.providers.DigestAuthenticationMechanism">118 <bean id="digestAuthMethod" class="org.kauriproject.security.providers.DigestAuthenticationMethod"> 119 119 <property name="userDetailsService" ref="userDetailsService"/> 120 120 </bean> … … 126 126 </bean> 127 127 128 <bean id="formAuthMe chanism" class="org.kauriproject.security.providers.FormAuthenticationMechanism">128 <bean id="formAuthMethod" class="org.kauriproject.security.providers.FormAuthenticationMethod"> 129 129 <constructor-arg ref="module"/> 130 130 <property name="preAuthTokenStore" ref="preAuthTokenStore"/> … … 132 132 </bean> 133 133 134 <bean id="formAuthMe chanism2" class="org.kauriproject.security.providers.FormAuthenticationMechanism">134 <bean id="formAuthMethod" class="org.kauriproject.security.providers.FormAuthenticationMethod"> 135 135 <constructor-arg ref="module"/> 136 136 <property name="preAuthTokenStore" ref="preAuthTokenStore2"/> … … 138 138 </bean> 139 139 140 <bean id="beidAuthMe chanism" class="org.kauriproject.security.providers.BelgianEidAuthenticationMechanism">140 <bean id="beidAuthMethod" class="org.kauriproject.security.providers.BelgianEidAuthenticationMethod"> 141 141 <property name="principalExtractor" ref="beidPrincipalExtractor"/> 142 142 <property name="httpsPort" value="8443"/> <!-- See also the port number in connectors.xml -->
Note: See TracChangeset
for help on using the changeset viewer.