Examples of org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl

Package org.apache.jackrabbit.oak.security.authentication.token

Examples of org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl

org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl
Default implementation of the {@code TokenProvider} interface that keeps logintokens in the content repository. As a precondition the configured the user management implementation must provide paths for all {@link org.apache.jackrabbit.api.security.user.User users} that refer toa valid {@link Tree} in the content repository.

Backwards compatibility with Jackrabbit 2.x
For security reasons the nodes storing the token information now have a dedicated node type (rep:Token) which has the following definition:
```
 [rep:Token] > mix:referenceable - rep:token.key (STRING) protected mandatory - rep:token.exp (DATE) protected mandatory - * (UNDEFINED) protected - * (UNDEFINED) multiple protected 
```
Consequently the hash of the token and the expiration time of tokens generated by this provider can no longer be manipulated using regular JCR item modifications.

Existing login tokens generated by Jackrabbit 2.x which are migrated to OAK will still be valid (unless they expire) due to the fact that {@link #getTokenInfo(String)} and the implementation of the {@link TokenInfo}interface will not validate the node type of the token node associated with a given token.

    @Nonnull
    @Override
    public TokenProvider getTokenProvider(Root root) {
        ConfigurationParameters tokenOptions = getParameters().getConfigValue(PARAM_TOKEN_OPTIONS, new ConfigurationParameters());
        UserConfiguration uc = getSecurityProvider().getConfiguration(UserConfiguration.class);
        return new TokenProviderImpl(root, tokenOptions, uc);
    }

View Full Code Here

    @Nonnull
    @Override
    public TokenProvider getTokenProvider(Root root) {
        ConfigurationParameters tokenOptions = config.getConfigValue(PARAM_TOKEN_OPTIONS, new ConfigurationParameters());
        UserConfiguration uc = securityProvider.getConfiguration(UserConfiguration.class);
        return new TokenProviderImpl(root, tokenOptions, uc);
    }

View Full Code Here


    @Nonnull
    @Override
    public TokenProvider getTokenProvider(Root root) {
        ConfigurationParameters tokenOptions = config.getConfigValue(PARAM_TOKEN_OPTIONS, new ConfigurationParameters());
        return new TokenProviderImpl(root, tokenOptions, securityProvider.getUserConfiguration());
    }

View Full Code Here


    @Nonnull
    @Override
    public TokenProvider getTokenProvider(Root root) {
        ConfigurationParameters tokenOptions = options.getConfigValue(PARAM_TOKEN_OPTIONS, new ConfigurationParameters());
        return new TokenProviderImpl(root, tokenOptions, securityProvider.getUserConfiguration());
    }

View Full Code Here

    @Nonnull
    @Override
    public TokenProvider getTokenProvider(Root root) {
        ConfigurationParameters tokenOptions = getParameters().getConfigValue(PARAM_TOKEN_OPTIONS, new ConfigurationParameters());
        UserConfiguration uc = getSecurityProvider().getConfiguration(UserConfiguration.class);
        return new TokenProviderImpl(root, tokenOptions, uc);
    }

View Full Code Here

TOP

Related Classes of org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl

org.apache.jackrabbit.api.security.user.Authorizable

org.apache.jackrabbit.api.security.user.User

org.apache.jackrabbit.oak.api.CoreValue

org.apache.jackrabbit.oak.api.CoreValueFactory

org.apache.jackrabbit.oak.api.PropertyState

org.apache.jackrabbit.oak.api.QueryEngine

org.apache.jackrabbit.oak.api.Result

org.apache.jackrabbit.oak.api.Root

org.apache.jackrabbit.oak.api.Tree

org.apache.jackrabbit.oak.core.IdentifierManager

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl

Backwards compatibility with Jackrabbit 2.x

Related Classes of org.apache.jackrabbit.oak.security.authentication.token.TokenProviderImpl