org.mmbase.security.implementation.basic
Class AuthenticationHandler

java.lang.Object
  org.mmbase.security.Configurable
      org.mmbase.security.Authentication
          org.mmbase.security.implementation.basic.AuthenticationHandler

All Implemented Interfaces:

AuthenticationData

public class AuthenticationHandler
extends Authentication

Authentication based on a config files. There is an XML file (`authentication.xml') which defines several modules (conected to the 'module/method' String). There are now three moduiles in this implementation. 'anonymous' for the anonyunous user. 'name/password' for 'basic users'. The username/passwords of the basic users are defined in an account.properties file. The last module is 'admin' which authenticates only on password.

Version:

$Id: AuthenticationHandler.java 45150 2011-02-10 09:18:12Z michiel $

Author:

Eduard Witteveen

To Do:

MM: I think it should be possible for admin to login with name/password to, how else could you use HTTP authentication (e.g. admin pages).

Field Summary

static String	DTD_BASICSECURITY_1_0
static String	PUBLIC_ID_BASICSECURITY_1_0

Fields inherited from class org.mmbase.security.Authentication

attributes, PARAMETERS_ANONYMOUS, PARAMETERS_NAME_PASSWORD, PARAMETERS_USERS

Fields inherited from class org.mmbase.security.Configurable

configResource, configWatcher, manager

Fields inherited from interface org.mmbase.security.AuthenticationData

METHOD_ANONYMOUS, METHOD_ASIS, METHOD_DEFAULT, METHOD_DELEGATE, METHOD_HTTP, METHOD_LOGINPAGE, METHOD_LOGOUT, METHOD_PAGELOGON, METHOD_SESSIONDELEGATE, METHOD_SESSIONLOGON, METHOD_UNSET, PARAMETER_AUTHENTICATE, PARAMETER_LOGOUT, PARAMETER_PASSWORD, PARAMETER_RANK, PARAMETER_SESSIONNAME, PARAMETER_USERNAME, PARAMETER_USERNAMES, STORES_CONTEXT_IN_OWNER, STRINGS

Constructor Summary

AuthenticationHandler()

Method Summary

boolean	isValid(UserContext usercontext) this method does nothing..
protected void	load()
UserContext	login(String moduleName, Map loginInfo, Object[] parameters)

Methods inherited from class org.mmbase.security.Authentication

createParameters, getAttribute, getDefaultMethod, getKey, getMethod, getMethod, getNode, getTypes, getTypes, getUserBuilder

Methods inherited from class org.mmbase.security.Configurable

load

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PUBLIC_ID_BASICSECURITY_1_0

public static final String PUBLIC_ID_BASICSECURITY_1_0

See Also:

Constant Field Values

DTD_BASICSECURITY_1_0

public static final String DTD_BASICSECURITY_1_0

See Also:

Constant Field Values

Constructor Detail

AuthenticationHandler

public AuthenticationHandler()

Method Detail

load

protected void load()

Specified by:

load in class Configurable

login

public UserContext login(String moduleName,
                         Map loginInfo,
                         Object[] parameters)
                  throws SecurityException

Specified by:

login in class Authentication

Throws:

SecurityException

isValid

public boolean isValid(UserContext usercontext)
                throws SecurityException

this method does nothing..

Throws:

SecurityException