public class SimpleAccountRealm extends AuthorizingRealm
Realm interface that uses a set of configured user accounts and roles to support authentication and authorization. Each account entry specifies the username, password, and roles for a user. Roles can also be mapped to permissions and associated with users.
User accounts and roles are stored in two
Maps in memory, so it is expected that the total number of either is not sufficiently large.
| Modifier and Type | Field and Description |
|---|---|
protected Map |
roles
|
protected ReadWriteLock |
ROLES_LOCK
|
protected Map |
users
|
protected ReadWriteLock |
USERS_LOCK
|
| Constructor and Description |
|---|
SimpleAccountRealm()
|
SimpleAccountRealm(String
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
accountExists(String
|
protected void |
add(SimpleAccount
|
protected void |
add(SimpleRole
|
void |
addAccount(String
|
void |
addAccount(String
|
void |
addRole(String
|
protected AuthenticationInfo |
doGetAuthenticationInfo(AuthenticationToken
Retrieves authentication data from an implementation-specific datasource (RDBMS, LDAP, etc) for the given authentication token.
|
protected AuthorizationInfo |
doGetAuthorizationInfo(PrincipalCollection
Retrieves the AuthorizationInfo for the given principals from the underlying data store.
|
protected SimpleRole |
getRole(String
|
protected SimpleAccount |
getUser(String
|
protected String |
getUsername(PrincipalCollection
|
protected String |
getUsername(SimpleAccount
|
boolean |
roleExists(String
|
protected static Set |
toSet(String
|
afterCacheManagerSet, checkPermission, checkPermission, checkPermission, checkPermissions, checkPermissions, checkPermissions, checkRole, checkRole, checkRoles, checkRoles, checkRoles, clearCachedAuthorizationInfo, doClearCache, getAuthorizationCache, getAuthorizationCacheKey, getAuthorizationCacheName, getAuthorizationInfo, getPermissionResolver, getPermissions, getRolePermissionResolver, hasAllRoles, hasRole, hasRole, hasRoles, hasRoles, isAuthorizationCachingEnabled, isPermitted, isPermitted, isPermitted, isPermitted, isPermitted, isPermitted, isPermittedAll, isPermittedAll, isPermittedAll, onInit, setAuthorizationCache, setAuthorizationCacheName, setAuthorizationCachingEnabled, setName, setPermissionResolver, setRolePermissionResolverassertCredentialsMatch, clearCachedAuthenticationInfo, getAuthenticationCache, getAuthenticationCacheKey, getAuthenticationCacheKey, getAuthenticationCacheName, getAuthenticationInfo, getAuthenticationTokenClass, getCredentialsMatcher, init, isAuthenticationCachingEnabled, isAuthenticationCachingEnabled, setAuthenticationCache, setAuthenticationCacheName, setAuthenticationCachingEnabled, setAuthenticationTokenClass, setCredentialsMatcher, supportsclearCache, getAvailablePrincipal, getCacheManager, getName, isCachingEnabled, onLogout, setCacheManager, setCachingEnabledclone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitinitprotected final Map<String ,SimpleAccount > users
protected final Map<String ,SimpleRole > roles
protected final ReadWriteLockUSERS_LOCK
protected final ReadWriteLockROLES_LOCK
public SimpleAccountRealm()
public SimpleAccountRealm(Stringname)
protected SimpleAccountgetUser(String username)
public boolean accountExists(Stringusername)
protected StringgetUsername(SimpleAccount account)
protected StringgetUsername(PrincipalCollection principals)
protected void add(SimpleAccountaccount)
protected SimpleRolegetRole(String rolename)
public boolean roleExists(Stringname)
public void addRole(Stringname)
protected void add(SimpleRolerole)
protected AuthenticationInfodoGetAuthenticationInfo(AuthenticationToken token) throws AuthenticationException
AuthenticatingRealm
null return value means that no account could be associated with the specified token.
doGetAuthenticationInfo in class
AuthenticatingRealm
token - the authentication token containing the user's principal and credentials.
AuthenticationInfo object containing account data resulting from the authentication ONLY if the lookup is successful (i.e. account exists and is valid, etc.)
AuthenticationException - if there is an error acquiring data or performing realm-specific authentication logic for the specified
token
protected AuthorizationInfodoGetAuthorizationInfo(PrincipalCollection principals)
AuthorizingRealm
SimpleAuthorizationInfo, as it is suitable in most cases.
doGetAuthorizationInfo in class
AuthorizingRealm
principals - the primary identifying principals of the AuthorizationInfo that should be retrieved.
SimpleAuthorizationInfo