ome.security.auth

Class JdbcPasswordProvider

java.lang.Object

ome.security.auth.ConfigurablePasswordProvider

ome.security.auth.JdbcPasswordProvider

All Implemented Interfaces:

PasswordProvider, PasswordUtility, org.springframework.context.ApplicationContextAware

Direct Known Subclasses:

JdbcHashedPasswordProvider

public class JdbcPasswordProvider
extends ConfigurablePasswordProvider

Central PasswordProvider which uses the "password" table in the central OMERO database.

Since:

4.0

Author:

Josh Moore, josh at glencoesoftware.com

Field Summary

Fields inherited from class ome.security.auth.ConfigurablePasswordProvider

ctx, hash, ignoreUnknown, legacyUtil, log, salt, util

Constructor Summary

Constructors

Constructor and Description
JdbcPasswordProvider(PasswordUtil util)
JdbcPasswordProvider(PasswordUtil util, boolean ignoreUnknown)
JdbcPasswordProvider(PasswordUtil util, boolean ignoreUnknown, boolean salt)

Method Summary

Methods

Modifier and Type	Method and Description
void	changePassword(String user, String password) Throws by default.
protected void	changePassword(String user, String password, PasswordUtil.METHOD method) Actually perform the password change in the database and log the event against the user.
Boolean	checkPassword(String user, String password, boolean readOnly) Retrieves password from the database and calls ConfigurablePasswordProvider.comparePasswords(String, String).
boolean	hasPassword(String user) Always returns false, override with specific logic.

Methods inherited from class ome.security.auth.ConfigurablePasswordProvider

comparePasswords, comparePasswords, comparePasswords, encodePassword, encodePassword, encodeSaltedPassword, loginAttempt, setApplicationContext, setLegacyUtil

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JdbcPasswordProvider

public JdbcPasswordProvider(PasswordUtil util)

JdbcPasswordProvider

public JdbcPasswordProvider(PasswordUtil util,
                    boolean ignoreUnknown)

JdbcPasswordProvider

public JdbcPasswordProvider(PasswordUtil util,
                    boolean ignoreUnknown,
                    boolean salt)

Method Detail

hasPassword

public boolean hasPassword(String user)

Description copied from class: ConfigurablePasswordProvider

Always returns false, override with specific logic.

Specified by:

hasPassword in interface PasswordProvider

Overrides:

hasPassword in class ConfigurablePasswordProvider

checkPassword

public Boolean checkPassword(String user,
                    String password,
                    boolean readOnly)

Retrieves password from the database and calls ConfigurablePasswordProvider.comparePasswords(String, String). Uses default logic if user is unknown.

Specified by:

checkPassword in interface PasswordProvider

Overrides:

checkPassword in class ConfigurablePasswordProvider

changePassword

public void changePassword(String user,
                  String password)
                    throws PasswordChangeException

Description copied from class: ConfigurablePasswordProvider

Throws by default.

Specified by:

changePassword in interface PasswordProvider

Overrides:

changePassword in class ConfigurablePasswordProvider

Throws:

PasswordChangeException

changePassword

protected void changePassword(String user,
                  String password,
                  PasswordUtil.METHOD method)
                       throws PasswordChangeException

Actually perform the password change in the database and log the event against the user.

Parameters:

user - the name of the user whose password is to be changed

password - the password to prepare for storing in the table

method - how the given password is to be stored

Throws:

PasswordChangeException - if the operation failed