com.haulmont.cuba.security.auth.providers

Class LoginPasswordAuthenticationProvider

java.lang.Object

com.haulmont.cuba.security.auth.providers.AbstractAuthenticationProvider

com.haulmont.cuba.security.auth.providers.LoginPasswordAuthenticationProvider

All Implemented Interfaces:

AuthenticationProvider, org.springframework.core.Ordered

@Component(value="cuba_LoginPasswordAuthenticationProvider")
public class LoginPasswordAuthenticationProvider
extends AbstractAuthenticationProvider
implements org.springframework.core.Ordered

Field Summary

Fields

Modifier and Type	Field and Description
protected PasswordEncryption	passwordEncryption
protected java.util.List<UserAccessChecker>	userAccessCheckers
protected java.util.List<UserCredentialsChecker>	userCredentialsCheckers
protected UserSessionManager	userSessionManager

Fields inherited from class com.haulmont.cuba.security.auth.providers.AbstractAuthenticationProvider

messages, MSG_PACK, persistence

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Fields inherited from interface com.haulmont.cuba.security.auth.AuthenticationProvider

HIGHEST_PLATFORM_PRECEDENCE, LOWEST_PLATFORM_PRECEDENCE

Constructor Summary

Constructors

Constructor and Description
LoginPasswordAuthenticationProvider(Persistence persistence, Messages messages)

Method Summary

Modifier and Type	Method and Description
AuthenticationDetails	authenticate(Credentials credentials) Authenticates a user and provides authentication details.
protected void	checkUserAccess(Credentials loginAndPassword, AuthenticationDetails authenticationDetails)
protected void	checkUserCredentials(Credentials credentials)
protected UserSession	createSession(LoginPasswordCredentials credentials, User user, java.util.Locale userLocale)
int	getOrder()
boolean	supports(java.lang.Class<?> credentialsClass) Checks if this provider supports passed credentials class or not.

Methods inherited from class com.haulmont.cuba.security.auth.providers.AbstractAuthenticationProvider

getExpiredRememberMeTokenMessage, getInvalidCredentialsMessage, getUserLocale, loadUser, loadUser, setClientSessionParams

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

userAccessCheckers

@Inject
protected java.util.List<UserAccessChecker> userAccessCheckers

userCredentialsCheckers

@Inject
protected java.util.List<UserCredentialsChecker> userCredentialsCheckers

userSessionManager

@Inject
protected UserSessionManager userSessionManager

passwordEncryption

@Inject
protected PasswordEncryption passwordEncryption

Constructor Detail

LoginPasswordAuthenticationProvider

@Inject
public LoginPasswordAuthenticationProvider(Persistence persistence,
                                                   Messages messages)

Method Detail

authenticate

public AuthenticationDetails authenticate(Credentials credentials)
                                   throws LoginException

Description copied from interface: AuthenticationProvider

Authenticates a user and provides authentication details. Should not start session. Obtained session cannot be used for service requests.

Specified by:

authenticate in interface AuthenticationProvider

Parameters:

credentials - credentials

Returns:

authentication details or null if passed credentials object cannot be processed

Throws:

LoginException - if authentication fails

createSession

protected UserSession createSession(LoginPasswordCredentials credentials,
                                    User user,
                                    java.util.Locale userLocale)
                             throws LoginException

Throws:

LoginException

checkUserCredentials

protected void checkUserCredentials(Credentials credentials)
                             throws LoginException

Throws:

LoginException

checkUserAccess

protected void checkUserAccess(Credentials loginAndPassword,
                               AuthenticationDetails authenticationDetails)
                        throws LoginException

Throws:

LoginException

supports

public boolean supports(java.lang.Class<?> credentialsClass)

Description copied from interface: AuthenticationProvider

Checks if this provider supports passed credentials class or not.

Specified by:

supports in interface AuthenticationProvider

Parameters:

credentialsClass - credentials class

Returns:

true if this provider supports the indicated Credentials object.

getOrder

public int getOrder()

Specified by:

getOrder in interface org.springframework.core.Ordered