Package org.apache.catalina.realm
Class GenericPrincipal
- java.lang.Object
-
- org.apache.catalina.realm.GenericPrincipal
-
- All Implemented Interfaces:
Serializable
,Principal
,TomcatPrincipal
- Direct Known Subclasses:
UserDatabaseRealm.UserDatabasePrincipal
public class GenericPrincipal extends Object implements TomcatPrincipal, Serializable
Generic implementation of java.security.Principal that is available for use byRealm
implementations.- Author:
- Craig R. McClanahan
- See Also:
- Serialized Form
-
-
Field Summary
Fields Modifier and Type Field Description protected GSSCredential
gssCredential
The user's delegated credentials.protected LoginContext
loginContext
The JAAS LoginContext, if any, used to authenticate this Principal.protected String
name
The username of the user represented by this Principal.protected String[]
roles
The set of roles associated with this user.protected Principal
userPrincipal
The authenticated Principal to be exposed to applications.
-
Constructor Summary
Constructors Constructor Description GenericPrincipal(String name)
Construct a new Principal, associated with the specified Realm, for the specified username, with no roles.GenericPrincipal(String name, String password, List<String> roles)
Deprecated.This method will be removed in Tomcat 11 onwardsGenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal)
Deprecated.This method will be removed in Tomcat 11 onwardsGenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal, LoginContext loginContext)
Deprecated.This method will be removed in Tomcat 11 onwardsGenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal, LoginContext loginContext, GSSCredential gssCredential)
Deprecated.This method will be removed in Tomcat 11 onwardsGenericPrincipal(String name, List<String> roles)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).GenericPrincipal(String name, List<String> roles, Principal userPrincipal)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).GenericPrincipal(String name, List<String> roles, Principal userPrincipal, LoginContext loginContext)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).GenericPrincipal(String name, List<String> roles, Principal userPrincipal, LoginContext loginContext, GSSCredential gssCredential)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description GSSCredential
getGssCredential()
String
getName()
String[]
getRoles()
Principal
getUserPrincipal()
boolean
hasRole(String role)
Does the user represented by this Principal possess the specified role?void
logout()
Calls logout, if necessary, on any associated JAASLoginContext and/or GSSContext.protected void
setGssCredential(GSSCredential gssCredential)
String
toString()
Return a String representation of this object, which exposes only information that should be public.
-
-
-
Field Detail
-
name
protected final String name
The username of the user represented by this Principal.
-
roles
protected final String[] roles
The set of roles associated with this user.
-
userPrincipal
protected final Principal userPrincipal
The authenticated Principal to be exposed to applications.
-
loginContext
protected final transient LoginContext loginContext
The JAAS LoginContext, if any, used to authenticate this Principal. Kept so we can call logout().
-
gssCredential
protected transient GSSCredential gssCredential
The user's delegated credentials.
-
-
Constructor Detail
-
GenericPrincipal
public GenericPrincipal(String name)
Construct a new Principal, associated with the specified Realm, for the specified username, with no roles.- Parameters:
name
- The username of the user represented by this Principal
-
GenericPrincipal
public GenericPrincipal(String name, List<String> roles)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalroles
- List of roles (must be Strings) possessed by this user
-
GenericPrincipal
@Deprecated public GenericPrincipal(String name, String password, List<String> roles)
Deprecated.This method will be removed in Tomcat 11 onwardsConstruct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalpassword
- Unusedroles
- List of roles (must be Strings) possessed by this user
-
GenericPrincipal
public GenericPrincipal(String name, List<String> roles, Principal userPrincipal)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returned
-
GenericPrincipal
@Deprecated public GenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal)
Deprecated.This method will be removed in Tomcat 11 onwardsConstruct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalpassword
- Unusedroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returned
-
GenericPrincipal
public GenericPrincipal(String name, List<String> roles, Principal userPrincipal, LoginContext loginContext)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returnedloginContext
- - If provided, this will be used to log out the user at the appropriate time
-
GenericPrincipal
@Deprecated public GenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal, LoginContext loginContext)
Deprecated.This method will be removed in Tomcat 11 onwardsConstruct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalpassword
- Unusedroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returnedloginContext
- - If provided, this will be used to log out the user at the appropriate time
-
GenericPrincipal
public GenericPrincipal(String name, List<String> roles, Principal userPrincipal, LoginContext loginContext, GSSCredential gssCredential)
Construct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returnedloginContext
- - If provided, this will be used to log out the user at the appropriate timegssCredential
- - If provided, the user's delegated credentials
-
GenericPrincipal
@Deprecated public GenericPrincipal(String name, String password, List<String> roles, Principal userPrincipal, LoginContext loginContext, GSSCredential gssCredential)
Deprecated.This method will be removed in Tomcat 11 onwardsConstruct a new Principal, associated with the specified Realm, for the specified username, with the specified role names (as Strings).- Parameters:
name
- The username of the user represented by this Principalpassword
- Unusedroles
- List of roles (must be Strings) possessed by this useruserPrincipal
- - the principal to be returned from the request getUserPrincipal call if not null; if null, this will be returnedloginContext
- - If provided, this will be used to log out the user at the appropriate timegssCredential
- - If provided, the user's delegated credentials
-
-
Method Detail
-
getRoles
public String[] getRoles()
-
getUserPrincipal
public Principal getUserPrincipal()
- Specified by:
getUserPrincipal
in interfaceTomcatPrincipal
- Returns:
- The authenticated Principal to be exposed to applications.
-
getGssCredential
public GSSCredential getGssCredential()
- Specified by:
getGssCredential
in interfaceTomcatPrincipal
- Returns:
- The user's delegated credentials.
-
setGssCredential
protected void setGssCredential(GSSCredential gssCredential)
-
hasRole
public boolean hasRole(String role)
Does the user represented by this Principal possess the specified role?- Parameters:
role
- Role to be tested- Returns:
true
if this Principal has been assigned the given role, otherwisefalse
-
toString
public String toString()
Return a String representation of this object, which exposes only information that should be public.
-
logout
public void logout() throws Exception
Description copied from interface:TomcatPrincipal
Calls logout, if necessary, on any associated JAASLoginContext and/or GSSContext. May in the future be extended to cover other logout requirements.- Specified by:
logout
in interfaceTomcatPrincipal
- Throws:
Exception
- If something goes wrong with the logout. Uses Exception to allow for future expansion of this method to cover other logout mechanisms that might throw a different exception to LoginContext
-
-