ome.security.auth

Class ConfigurablePasswordProvider

java.lang.Object

ome.security.auth.ConfigurablePasswordProvider

All Implemented Interfaces:

PasswordProvider, PasswordUtility, org.springframework.context.ApplicationContextAware

Direct Known Subclasses:

FilePasswordProvider, JdbcPasswordProvider, LdapPasswordProvider, LdapPasswordProvider431

public abstract class ConfigurablePasswordProvider
extends Object
implements PasswordProvider, PasswordUtility, org.springframework.context.ApplicationContextAware

Base class for most PasswordProvider implementations, providing configuration for default behaviors. There is no need for a subclass to use this implementation.

Since:

4.0

Author:

Josh Moore, josh at glencoesoftware.com

See Also:

SecuritySystem, Permissions

Field Summary

Fields

Modifier and Type	Field and Description
protected OmeroContext	ctx
protected String	hash Hash implementation to use for encoding passwords to check and changed passwords.
protected boolean	ignoreUnknown If true, this implementation should return a null on #checkPassword(String, String) if the user is unknown, otherwise a Boolean.FALSE.
protected PasswordUtil	legacyUtil Possibly null PasswordUtil instance which will be used as a fallback for password checks if the util instance fails.
protected org.slf4j.Logger	log
protected boolean	salt Whether or not salting based on the user ID should be attempted.
protected PasswordUtil	util

Constructor Summary

Constructors

Constructor and Description
ConfigurablePasswordProvider(PasswordUtil util) Call ConfigurablePasswordProvider(PasswordUtil, boolean) with "ignoreUnknown" equal to false.
ConfigurablePasswordProvider(PasswordUtil util, boolean ignoreUnknown) Call ConfigurablePasswordProvider(PasswordUtil, boolean, boolean) with "salt" equal to false.
ConfigurablePasswordProvider(PasswordUtil util, boolean ignoreUnknown, boolean salt)

Method Summary

Methods

Modifier and Type	Method and Description
void	changePassword(String user, String password) Throws by default.
Boolean	checkPassword(String user, String password, boolean readOnly) If ignoreUnknown is true, returns null, since the base class knows no users.
Boolean	comparePasswords(Long userId, String trusted, String provided) Compares the password provided by the user (unhashed) against the given trusted password.
protected boolean	comparePasswords(Long userId, String trusted, String provided, PasswordUtil util)
Boolean	comparePasswords(String trusted, String provided) Compares the password provided by the user (unhashed) against the given trusted password.
protected String	encodePassword(Long userId, String newPassword, boolean salt, PasswordUtil util)
String	encodePassword(String newPassword) Encodes the password as it would be encoded for a check by comparePasswords(String, String)
String	encodeSaltedPassword(Long userId, String newPassword) Encodes the password as it would be encoded for a check by comparePasswords(String, String) salting the password with the given userId if it's provided.
boolean	hasPassword(String user) Always returns false, override with specific logic.
protected Boolean	loginAttempt(String user, Boolean success)
void	setApplicationContext(org.springframework.context.ApplicationContext ctx) Set the ApplicationContext that this object runs in.
void	setLegacyUtil(PasswordUtil legacy)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected final org.slf4j.Logger log

hash

protected final String hash

Hash implementation to use for encoding passwords to check and changed passwords. Default value: MD5 (For the moment, the only supported value!)

salt

protected final boolean salt

Whether or not salting based on the user ID should be attempted.

ignoreUnknown

protected final boolean ignoreUnknown

If true, this implementation should return a null on #checkPassword(String, String) if the user is unknown, otherwise a Boolean.FALSE. Default value: false

util

protected final PasswordUtil util

legacyUtil

protected PasswordUtil legacyUtil

Possibly null PasswordUtil instance which will be used as a fallback for password checks if the util instance fails.

ctx

protected OmeroContext ctx

Constructor Detail

ConfigurablePasswordProvider

public ConfigurablePasswordProvider(PasswordUtil util)

Call ConfigurablePasswordProvider(PasswordUtil, boolean) with "ignoreUnknown" equal to false.

Parameters:

util -

ConfigurablePasswordProvider

public ConfigurablePasswordProvider(PasswordUtil util,
                            boolean ignoreUnknown)

Call ConfigurablePasswordProvider(PasswordUtil, boolean, boolean) with "salt" equal to false.

ConfigurablePasswordProvider

public ConfigurablePasswordProvider(PasswordUtil util,
                            boolean ignoreUnknown,
                            boolean salt)

Method Detail

setApplicationContext

public void setApplicationContext(org.springframework.context.ApplicationContext ctx)
                           throws org.springframework.beans.BeansException

Description copied from interface: org.springframework.context.ApplicationContextAware

Set the ApplicationContext that this object runs in. Normally this call will be used to initialize the object.

Invoked after population of normal bean properties but before an init callback such as InitializingBean.afterPropertiesSet() or a custom init-method. Invoked after ResourceLoaderAware.setResourceLoader(org.springframework.core.io.ResourceLoader), ApplicationEventPublisherAware.setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher) and MessageSourceAware, if applicable.

Specified by:

setApplicationContext in interface org.springframework.context.ApplicationContextAware

Parameters:

ctx - the ApplicationContext object to be used by this object

Throws:

org.springframework.context.ApplicationContextException - in case of context initialization errors

org.springframework.beans.BeansException - if thrown by application context methods

See Also:

BeanInitializationException

setLegacyUtil

public void setLegacyUtil(PasswordUtil legacy)

loginAttempt

protected Boolean loginAttempt(String user,
                   Boolean success)

hasPassword

public boolean hasPassword(String user)

Always returns false, override with specific logic.

Specified by:

hasPassword in interface PasswordProvider

checkPassword

public Boolean checkPassword(String user,
                    String password,
                    boolean readOnly)

If ignoreUnknown is true, returns null, since the base class knows no users. Otherwise, return Boolean.FALSE specifying that authentication should fail.

Specified by:

checkPassword in interface PasswordProvider

changePassword

public void changePassword(String user,
                  String password)
                    throws PasswordChangeException

Throws by default.

Specified by:

changePassword in interface PasswordProvider

Throws:

PasswordChangeException

encodePassword

public String encodePassword(String newPassword)

Encodes the password as it would be encoded for a check by comparePasswords(String, String)

Specified by:

encodePassword in interface PasswordUtility

encodeSaltedPassword

public String encodeSaltedPassword(Long userId,
                          String newPassword)

Encodes the password as it would be encoded for a check by comparePasswords(String, String) salting the password with the given userId if it's provided.

encodePassword

protected String encodePassword(Long userId,
                    String newPassword,
                    boolean salt,
                    PasswordUtil util)

comparePasswords

public Boolean comparePasswords(String trusted,
                       String provided)

Compares the password provided by the user (unhashed) against the given trusted password. A return value of null, however, is also possible with the same semantics as a null from checkPassword(String, String, boolean). For this implementation, if the trusted password is null, return Boolean.FALSE. If the trusted password is empty (only whitespace), return Boolean.TRUE. Otherwise return the results of String.equals(Object).

Specified by:

comparePasswords in interface PasswordUtility

comparePasswords

public Boolean comparePasswords(Long userId,
                       String trusted,
                       String provided)

Compares the password provided by the user (unhashed) against the given trusted password. In general, if the trusted password is null, return Boolean.FALSE. If the trusted password is empty (only whitespace), return Boolean.TRUE. Otherwise return the results of String.equals(Object). If legacyUtil is non-null, and util return

comparePasswords

protected boolean comparePasswords(Long userId,
                       String trusted,
                       String provided,
                       PasswordUtil util)