Package org.apache.axis.security.servlet
Class ServletSecurityProvider
- java.lang.Object
-
- org.apache.axis.security.servlet.ServletSecurityProvider
-
- All Implemented Interfaces:
SecurityProvider
public class ServletSecurityProvider extends java.lang.Object implements SecurityProvider
A ServletSecurityProvider, combined with the ServletAuthenticatedUser class, allows the standard servlet security mechanisms (isUserInRole(), etc.) to integrate with Axis' access control mechanism. By utilizing this class (which the AxisServlet can be configured to do automatically), authentication and role information will come from your servlet engine.- Author:
- Glen Daniels (gdaniels@apache.org)
-
-
Field Summary
Fields Modifier and Type Field Description protected static org.apache.commons.logging.Loglog
-
Constructor Summary
Constructors Constructor Description ServletSecurityProvider()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description AuthenticatedUserauthenticate(MessageContext msgContext)Authenticate a user from a username/password pair.booleanuserMatches(AuthenticatedUser user, java.lang.String principal)See if a user matches a principal name.
-
-
-
Method Detail
-
authenticate
public AuthenticatedUser authenticate(MessageContext msgContext)
Authenticate a user from a username/password pair.- Specified by:
authenticatein interfaceSecurityProvider- Parameters:
username- the user name to checkpassword- the password to check- Returns:
- an AuthenticatedUser or null
-
userMatches
public boolean userMatches(AuthenticatedUser user, java.lang.String principal)
See if a user matches a principal name. The name might be a user or a group.- Specified by:
userMatchesin interfaceSecurityProvider- Returns:
- true if the user matches the passed name
-
-