com.caucho.server.security
Class ClientCertLogin

java.lang.Object
  com.caucho.server.security.AbstractLogin
      com.caucho.server.security.ClientCertLogin

All Implemented Interfaces:

LoginFilter

public class ClientCertLogin
extends AbstractLogin

Implements the "CLIENT-CERT" auth-method. CLIENT-CERT uses the SSL authentication with WWW-Authenticate and SC_UNAUTHORIZE.

Field Summary

Fields inherited from class com.caucho.server.security.AbstractLogin

_auth, log

Constructor Summary

ClientCertLogin()

Method Summary

java.security.Principal	authenticate(HttpServletRequest request, HttpServletResponse response, ServletContext application) Logs a user in with a user name and a password.
java.lang.String	getAuthType() Returns the authentication type.
java.security.Principal	getUserPrincipal(HttpServletRequest request, HttpServletResponse response, ServletContext application) Returns the current user with the user name and password.

Methods inherited from class com.caucho.server.security.AbstractLogin

getAuthenticator, init, isUserInRole, logout, setAuthenticator, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

ClientCertLogin

public ClientCertLogin()

Method Detail

getAuthType

public java.lang.String getAuthType()

Returns the authentication type.

Overrides:

getAuthType in class AbstractLogin

authenticate

public java.security.Principal authenticate(HttpServletRequest request,
                                            HttpServletResponse response,
                                            ServletContext application)
                                     throws ServletException,
                                            java.io.IOException

Logs a user in with a user name and a password. Basic authentication extracts the user and password from the authorization header. If the user/password is missing, authenticate will send a basic challenge.

Overrides:

authenticate in class AbstractLogin

Parameters:

request - servlet request

response - servlet response, in case any cookie need sending.

application - servlet application

Returns:

the logged in principal on success, null on failure.

Throws:

ServletException

java.io.IOException

getUserPrincipal

public java.security.Principal getUserPrincipal(HttpServletRequest request,
                                                HttpServletResponse response,
                                                ServletContext application)
                                         throws ServletException

Returns the current user with the user name and password.

Overrides:

getUserPrincipal in class AbstractLogin

Parameters:

request - servlet request

response - servlet response, in case any cookie need sending.

application - servlet application

Returns:

the logged in principal on success, null on failure.

Throws:

ServletException