com.hp.keystone

Class KeystoneAuthenticationManager

java.lang.Object

com.hp.keystone.KeystoneAuthenticationManager

All Implemented Interfaces:

AuthenticationService

public class KeystoneAuthenticationManager
extends Object
implements AuthenticationService

Implementation of the authentication service against a Keystone identity server.

Author:

Thomas Vachuska, Liem Nguyen, Rama Yalakanti

Field Summary

Fields

Modifier and Type	Field and Description
protected AuthClientFactory	factory
protected static org.slf4j.Logger	log

Constructor Summary

Constructors

Constructor and Description
KeystoneAuthenticationManager() Creates an adapter to authenticate using Keystone server.

Method Summary

Methods

Modifier and Type	Method and Description
Authentication	authenticate(String suppliedDomain, String user, String password) Authenticate against the specified domain using the supplied user name and password.
protected void	downloadPKICerts() Downloads PKI certificates into the user configured path
void	downloadPKICerts(String certsLocation) Downloads required PKI certificates from Keystone server.
protected int	getCertsDownloadHour()
protected int	getRevocationsDownloadPeriod()
Map<String,Long>	getRevokedTokens(String certsLocation) Get latest revoked tokens from Keystone server.
void	init(Properties properties) Initialize the authentication manager using the supplied properties.
void	invalidate(String token) Invalidates the specified authentication token.
protected boolean	isPKIProviderSet()
Authentication	validate(String token) Determines whether the specified authentication token is valid and if so, provides the associated authentication data.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static final org.slf4j.Logger log

factory

protected AuthClientFactory factory

Constructor Detail

KeystoneAuthenticationManager

public KeystoneAuthenticationManager()

Creates an adapter to authenticate using Keystone server.

Method Detail

init

public void init(Properties properties)

Initialize the authentication manager using the supplied properties.

Parameters:

properties - configuration properties that can be used to override defaults

authenticate

public Authentication authenticate(String suppliedDomain,
                          String user,
                          String password)

Description copied from interface: AuthenticationService

Authenticate against the specified domain using the supplied user name and password.

Specified by:

authenticate in interface AuthenticationService

Parameters:

suppliedDomain - authentication domain

user - user name

password - user password

Returns:

authentication containing unique identifying token and associated authentication information

validate

public Authentication validate(String token)

Description copied from interface: AuthenticationService

Determines whether the specified authentication token is valid and if so, provides the associated authentication data.

Specified by:

validate in interface AuthenticationService

Parameters:

token - token to be validated

Returns:

authentication data associated with the given token via prior call to AuthenticationService.authenticate(String, String, String)

invalidate

public void invalidate(String token)

Description copied from interface: AuthenticationService

Invalidates the specified authentication token.

Specified by:

invalidate in interface AuthenticationService

Parameters:

token - token to be invalidated

downloadPKICerts

public void downloadPKICerts(String certsLocation)

Description copied from interface: AuthenticationService

Downloads required PKI certificates from Keystone server.

Specified by:

downloadPKICerts in interface AuthenticationService

Parameters:

certsLocation - PKI certificates path

downloadPKICerts

protected void downloadPKICerts()

Downloads PKI certificates into the user configured path

getCertsDownloadHour

protected int getCertsDownloadHour()

Returns:

the certsDownloadHour

getRevokedTokens

public Map<String,Long> getRevokedTokens(String certsLocation)

Description copied from interface: AuthenticationService

Get latest revoked tokens from Keystone server.

Specified by:

getRevokedTokens in interface AuthenticationService

Parameters:

certsLocation - PKI certificates path

Returns:

map of revoked token IDs and their expirations

getRevocationsDownloadPeriod

protected int getRevocationsDownloadPeriod()

Returns:

the certsDownloadHour

isPKIProviderSet

protected boolean isPKIProviderSet()