public abstract class IdentityValidator extends Object
| Constructor and Description |
|---|
IdentityValidator() |
| Modifier and Type | Method and Description |
|---|---|
protected byte[] |
decryptTokenData(com.digitalpetri.opcua.stack.core.channel.SecureChannel secureChannel,
com.digitalpetri.opcua.stack.core.security.SecurityAlgorithm algorithm,
byte[] dataBytes)
Decrypt the data contained in a
UserNameIdentityToken or IssuedIdentityToken. |
Object |
validateAnonymousToken(com.digitalpetri.opcua.stack.core.types.structured.AnonymousIdentityToken token,
com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy,
com.digitalpetri.opcua.stack.core.channel.SecureChannel channel,
Session session)
Validate an
AnonymousIdentityToken and return an identity Object that represents the user. |
Object |
validateIssuedIdentityToken(com.digitalpetri.opcua.stack.core.types.structured.IssuedIdentityToken token,
com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy,
com.digitalpetri.opcua.stack.core.channel.SecureChannel channel,
Session session)
Validate an
IssuedIdentityToken and return an identity Object that represents the user. |
Object |
validateUsernameToken(com.digitalpetri.opcua.stack.core.types.structured.UserNameIdentityToken token,
com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy,
com.digitalpetri.opcua.stack.core.channel.SecureChannel channel,
Session session)
Validate a
UserNameIdentityToken and return an identity Object that represents the user. |
Object |
validateX509Token(com.digitalpetri.opcua.stack.core.types.structured.X509IdentityToken token,
com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy,
com.digitalpetri.opcua.stack.core.channel.SecureChannel channel,
Session session)
Validate an
X509IdentityToken and return an identity Object that represents the user. |
public Object validateAnonymousToken(com.digitalpetri.opcua.stack.core.types.structured.AnonymousIdentityToken token, com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy, com.digitalpetri.opcua.stack.core.channel.SecureChannel channel, Session session) throws com.digitalpetri.opcua.stack.core.UaException
AnonymousIdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
token - the AnonymousIdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.channel - the SecureChannel the request is arriving on.session - the Session the request is arriving on.com.digitalpetri.opcua.stack.core.UaException - if the token is invalid, rejected, or user access is denied.public Object validateUsernameToken(com.digitalpetri.opcua.stack.core.types.structured.UserNameIdentityToken token, com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy, com.digitalpetri.opcua.stack.core.channel.SecureChannel channel, Session session) throws com.digitalpetri.opcua.stack.core.UaException
UserNameIdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
token - the UserNameIdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.channel - the SecureChannel the request is arriving on.session - the Session the request is arriving on.com.digitalpetri.opcua.stack.core.UaException - if the token is invalid, rejected, or user access is denied.public Object validateX509Token(com.digitalpetri.opcua.stack.core.types.structured.X509IdentityToken token, com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy, com.digitalpetri.opcua.stack.core.channel.SecureChannel channel, Session session) throws com.digitalpetri.opcua.stack.core.UaException
X509IdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
token - the X509IdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.channel - the SecureChannel the request is arriving on.session - the Session the request is arriving on.com.digitalpetri.opcua.stack.core.UaException - if the token is invalid, rejected, or user access is denied.public Object validateIssuedIdentityToken(com.digitalpetri.opcua.stack.core.types.structured.IssuedIdentityToken token, com.digitalpetri.opcua.stack.core.types.structured.UserTokenPolicy tokenPolicy, com.digitalpetri.opcua.stack.core.channel.SecureChannel channel, Session session) throws com.digitalpetri.opcua.stack.core.UaException
IssuedIdentityToken and return an identity Object that represents the user.
This Object should implement equality in such a way that a subsequent identity validation for the same user yields a comparable Object.
token - the IssuedIdentityToken.tokenPolicy - the UserTokenPolicy specified by the policyId in token.channel - the SecureChannel the request is arriving on.session - the Session the request is arriving on.com.digitalpetri.opcua.stack.core.UaException - if the token is invalid, rejected, or user access is denied.protected byte[] decryptTokenData(com.digitalpetri.opcua.stack.core.channel.SecureChannel secureChannel,
com.digitalpetri.opcua.stack.core.security.SecurityAlgorithm algorithm,
byte[] dataBytes)
throws com.digitalpetri.opcua.stack.core.UaException
UserNameIdentityToken or IssuedIdentityToken.
See UserNameIdentityToken.getPassword() and IssuedIdentityToken.getTokenData().
secureChannel - the SecureChannel.dataBytes - the encrypted data.com.digitalpetri.opcua.stack.core.UaException - if decryption fails.Copyright © 2015. All rights reserved.