Package com.addc.server.commons.security

Spring Security implementations for authentication and authorization that can be used both by SAS and Tomcat

See: Description

Interface Summary

Interface	Description
AuthorizationMapper	The AuthorizationMapper interface defines the contract for classes that will map the GrantedAthorities received from an authentication to a new set of GrantedAuthorities that are required by the service.
AuthorizationProvider	The AuthorizationProvider supplies authorization decisions for a target+operation for a specific authenticated user.

Class Summary

Class	Description
AuthenticatorImpl	The AuthenticatorImpl is the class that is TIEd to the POA for the security layer
AuthorizeTag	The AuthorizeTag supplies a tag which outputs the body of the tag if the configured access expression evaluates to true for the currently authenticated principal.
DefaultAuthorizationMapper	The DefaultAuthorizationMapper is a dummy class and simply copies the GrantedAuthorities and ignores checkAuthorization
DefaultAuthorizationProvider	The DefaultAuthorizationProvider supplies an AuthorizationProvider that will read an xml definition associating targets and operations with GrantedAuthoritys and will use this to check whether the current user has the authorization to invoke a given operation on a given target.
EncryptedSecretKeyInfo	The EncryptedSecretKeyInfo suppies information on an encrypted Secret key for reading and writing to PEM files.
FileUserDetailsService	The FileUserDetailsService supplies a UserDetailsService similar to the default Spring Security Properties file service but that will track changes to the User Properties file and reload it if the file changes.
LdapBindAuthenticator	The LdapBindAuthenticator extends the Spring Security BindAuthenticator and overrides the handleBindException method to supply meaningful information at WARN level for authentication failures
LdapContextSource	The LdapContextSource extends the DefaultSpringSecurityContextSource allowing the use of encrypted passwords in the security xml file.
PemSecretKeyHelper	The PemSecretKeyHelper supplies a helper for reading and writing SecretKeys to PKCS#8 password encrypted files
ServerAuthenticationProvider	The ServerAuthenticationProvider supplies the Authentication provider for all servers.
UserPropsAuthenticationProvider	The UserPropsAuthenticationProvider works in conjunction with the FileUserDetailsService to authenticate users defined in a properties file.

Package com.addc.server.commons.security Description

Spring Security implementations for authentication and authorization that can be used both by SAS and Tomcat