Package edu.ucsb.nceas.metacat

Class AuthSession

java.lang.Object

edu.ucsb.nceas.metacat.AuthSession

public class AuthSession
extends Object

A Class that implements session tracking for MetaCatServlet users. User's login data are stored in the session object. User authentication is done through a dynamically determined AuthInterface.

Constructor Summary

Constructors

Constructor	Description
AuthSession()	Construct an AuthSession
AuthSession(int groupCacheSize)	Constructor with cached group information for users.

Method Summary

Modifier and Type	Method	Description
boolean	authenticate(javax.servlet.http.HttpServletRequest request, String username, String password)	determine if the credentials for this session are valid by authenticating them using the authService configured for this session.
HashMap<String,Vector<String>>	getAttributes(String foruser)	Get attributes describing a user or group
String[]	getGroups(String logInUserName, String logInUserPassword, String userDN)	Get the all groups in which the given userDN is
String	getMessage()	Get the message associated with authenticating this session.
String	getPrincipals(String user, String password)	Get all groups and users from authentication scheme.
javax.servlet.http.HttpSession	getSessions()	Get the new session

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AuthSession

public AuthSession()
            throws InstantiationException,
IllegalAccessException,
ClassNotFoundException

Construct an AuthSession

Throws:

ClassNotFoundException

IllegalAccessException

InstantiationException

AuthSession

public AuthSession(int groupCacheSize)
            throws InstantiationException,
IllegalAccessException,
ClassNotFoundException

Constructor with cached group information for users.

Parameters:

groupCacheSize - the size of the LRUMap map

Throws:

InstantiationException

IllegalAccessException

ClassNotFoundException

Method Details

getSessions

public javax.servlet.http.HttpSession getSessions()

Get the new session

authenticate

public boolean authenticate(javax.servlet.http.HttpServletRequest request,
 String username,
 String password)

determine if the credentials for this session are valid by authenticating them using the authService configured for this session.

Parameters:

request - the request made from the client

username - the username entered when login

password - the password entered when login

getMessage

public String getMessage()

Get the message associated with authenticating this session. The message is formatted in XML.

getPrincipals

public String getPrincipals(String user,
 String password)
                     throws ConnectException

Get all groups and users from authentication scheme. The output is formatted in XML.

Parameters:

user - the user which requests the information

password - the user's password

Throws:

ConnectException

getAttributes

public HashMap<String,Vector<String>> getAttributes(String foruser)
                                             throws ConnectException

Get attributes describing a user or group

Parameters:

foruser - the user for which the attribute list is requested

Throws:

ConnectException

getGroups

public String[] getGroups(String logInUserName,
 String logInUserPassword,
 String userDN)
                   throws Exception

Get the all groups in which the given userDN is

Parameters:

logInUserName - it can be null

logInUserPassword - it can be null

userDN -

Returns:

null if no groups were found for the userDN

Throws:

Exception