Package org.seedstack.seed.security

Provides classes for securing an application.

See: Description

Interface Summary

Interface	Description
AuthenticationToken	An AuthenticationToken is a consolidation of an account's principals and supporting credentials submitted by a user during an authentication attempt.
PrincipalCustomizer<R extends Realm>	Interface used to add principals to the one added by a realm
Realm	A realm is used to authenticate and retrieve authorization for a user.
RoleMapping	Interface used to define a mapping between the data coming from a realm and the roles given to the user.
RolePermissionResolver	A RolePermissionResolver resolves a Role and converts it into a Collection of Permission instances.
Scope	A scope is an additional verification to be made on a permission.
SecuritySupport	Support for all security concerns.

Class Summary

Class	Description
AuthenticationInfo	Information about an authentication : the principals and credentials.
Permission	A Permission is represented by a String witch describes actions that can be done on a type of objects.
Role	Represents a Role and optionally a collection of scopes on which it is given.
SecurityConfig
SecurityConfig.AuthenticationConfig
SecurityConfig.CacheConfig
SecurityConfig.CacheConfig.ItemCacheConfig
SecurityConfig.RealmConfig
SecurityConfig.SessionConfig
SecurityConfig.SubjectConfig
SecurityConfig.UserConfig
SimpleScope	A simple kind of scope that can be described as a String which matches in an all or nothing fashion (strict equality).
UsernamePasswordToken	The authentication token is based on a username/password couple. The host of the user is added if it exists.
X509CertificateToken	An authentication token based on certificates.

Enum Summary

Enum	Description
CrudAction	Possible CRUD actions that will be taken into account for CRUD interceptors
Logical	An enum to define AND and OR logical operators to use with annotations RequireRoles or RequiresPermissions

Exception Summary

Exception	Description
AuthenticationException	Base class for exceptions concerning authentication failure.
AuthorizationException	Base class for exceptions concerning authorization failure
IncorrectCredentialsException	Exception to use when the credentials provided cannot be used to authentify the subject.
UnknownAccountException	Thrown when attempting to authenticate with a principal that doesn't exist in the system (e.g.
UnsupportedTokenException	Exception thrown during the authentication process when an AuthenticationToken implementation is encountered that is not supported by a Realm.

Annotation Types Summary

Annotation Type	Description
RequiresCrudPermissions	Annotation that marks classes and methods which should be intercepted and checked for subject permissions associated with an automatically inferred CrudAction.
RequiresPermissions	Annotation that marks classes and methods which should be intercepted and checked for subject permissions.
RequiresRoles	Annotation that marks classes and methods which should be intercepted and checked for subject role ownership.
WithUser	This annotation is used to log a user on for the duration of an integration test.

Package org.seedstack.seed.security Description

Provides classes for securing an application.