Modifier and Type	Class and Description
private static class	DigestAuthenticator.Digest
private static class	DigestAuthenticator.Nonce

Modifier and Type	Field and Description
private int	_maxNC
private long	_maxNonceAgeMs
private final ConcurrentMap<String, DigestAuthenticator.Nonce>	_nonceMap
private final Queue<DigestAuthenticator.Nonce>	_nonceQueue
private final SecureRandom	_random
private static final Logger	LOG Hides org.eclipse.jetty.security.authentication.LoginAuthenticator.LOG.
private static final QuotedStringTokenizer	TOKENIZER

Access	Constructor and Description
public	DigestAuthenticator()

Method Summary

Modifier and Type	Method and Description
private int	Returns: -1 for a bad nonce, 0 for a stale none, 1 for a good nonce checkNonce(DigestAuthenticator.Digest the digest data to check digest, Request the request object request)
public String	getAuthenticationType() Implements org.eclipse.jetty.security.Authenticator.getAuthenticationType.
public long	getMaxNonceAge()
public int	getMaxNonceCount()
public UserIdentity	login(String the username of the client to be authenticated username, Object the user's credential credentials, Request the inbound request that needs authentication request, Response response) Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.login. If the UserIdentity returned from `LoginService#login(String, Object, Request, Function)` is not null, it is assumed that the user is fully authenticated and we need to change the session id to prevent session fixation vulnerability.
public String	newNonce(Request request)
public void	setConfiguration(Authenticator.Configuration the configuration configuration) Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.setConfiguration. Implements org.eclipse.jetty.security.Authenticator.setConfiguration. Configure the Authenticator
public void	setMaxNonceAge(long maxNonceAgeInMillis)
public void	setMaxNonceCount(int maxNC)
public AuthenticationState	validateRequest(Request The request req, Response The response res, Callback the callback to use for writing a response callback) Implements org.eclipse.jetty.security.Authenticator.validateRequest. Validate a request

Inherited from org.eclipse.jetty.security.authentication.LoginAuthenticator:: getLoginService logout updateSession

Field Detail

_maxNC	back to summary
private int _maxNC

_maxNonceAgeMs	back to summary
private long _maxNonceAgeMs

_nonceMap	back to summary
private final ConcurrentMap<String, DigestAuthenticator.Nonce> _nonceMap

_nonceQueue	back to summary
private final Queue<DigestAuthenticator.Nonce> _nonceQueue

_random	back to summary
private final SecureRandom _random

LOG	back to summary
private static final Logger LOG Hides org.eclipse.jetty.security.authentication.LoginAuthenticator.LOG.

TOKENIZER	back to summary
private static final QuotedStringTokenizer TOKENIZER

Constructor Detail

DigestAuthenticator	back to summary
public DigestAuthenticator()

Method Detail

checkNonce	back to summary
private int checkNonce(DigestAuthenticator.Digest digest, Request request) Parameters digest:DigestAuthenticator.Digest the digest data to check request:Request the request object Returns:int -1 for a bad nonce, 0 for a stale none, 1 for a good nonce

getAuthenticationType	back to summary
public String getAuthenticationType() Implements org.eclipse.jetty.security.Authenticator.getAuthenticationType. Returns:String Doc from org.eclipse.jetty.security.Authenticator.getAuthenticationType. The name of the authentication type Annotations @Override

getAuthenticationType

back to summary

public String getAuthenticationType()

Implements org.eclipse.jetty.security.Authenticator.getAuthenticationType.

Returns:String

Doc from org.eclipse.jetty.security.Authenticator.getAuthenticationType.

The name of the authentication type

Annotations

@Override

getMaxNonceAge	back to summary
public long getMaxNonceAge()

getMaxNonceCount	back to summary
public int getMaxNonceCount()

login	back to summary
public UserIdentity login(String username, Object credentials, Request request, Response response) Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.login. Doc from org.eclipse.jetty.security.authentication.LoginAuthenticator.login. If the UserIdentity returned from `LoginService#login(String, Object, Request, Function)` is not null, it is assumed that the user is fully authenticated and we need to change the session id to prevent session fixation vulnerability. If the UserIdentity is not necessarily fully authenticated, then subclasses must override this method and determine when the UserIdentity IS fully authenticated and renew the session id. Parameters username:String the username of the client to be authenticated credentials:Object the user's credential request:Request the inbound request that needs authentication Annotations @Override

public UserIdentity login(String username, Object credentials, Request request, Response response)

Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.login.

Doc from org.eclipse.jetty.security.authentication.LoginAuthenticator.login.

If the UserIdentity returned from LoginService#login(String, Object, Request, Function) is not null, it is assumed that the user is fully authenticated and we need to change the session id to prevent session fixation vulnerability. If the UserIdentity is not necessarily fully authenticated, then subclasses must override this method and determine when the UserIdentity IS fully authenticated and renew the session id.

Parameters

username:String: the username of the client to be authenticated
credentials:Object: the user's credential
request:Request: the inbound request that needs authentication

Annotations

@Override

newNonce	back to summary
public String newNonce(Request request)

setConfiguration	back to summary
public void setConfiguration(Authenticator.Configuration configuration) Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.setConfiguration. Implements org.eclipse.jetty.security.Authenticator.setConfiguration. Doc from org.eclipse.jetty.security.Authenticator.setConfiguration. Configure the Authenticator Parameters configuration:Authenticator.Configuration the configuration Annotations @Override

setConfiguration

back to summary

public void setConfiguration(Authenticator.Configuration configuration)

Overrides org.eclipse.jetty.security.authentication.LoginAuthenticator.setConfiguration.

Implements org.eclipse.jetty.security.Authenticator.setConfiguration.

Doc from org.eclipse.jetty.security.Authenticator.setConfiguration.

Configure the Authenticator

Parameters

configuration:Authenticator.Configuration: the configuration

Annotations

@Override

setMaxNonceAge	back to summary
public void setMaxNonceAge(long maxNonceAgeInMillis)

setMaxNonceCount	back to summary
public void setMaxNonceCount(int maxNC)

validateRequest back to summary

validateRequest	back to summary
public AuthenticationState validateRequest(Request req, Response res, Callback callback) throws ServerAuthException Implements org.eclipse.jetty.security.Authenticator.validateRequest. Doc from org.eclipse.jetty.security.Authenticator.validateRequest. Validate a request Parameters req:Request The request res:Response The response callback:Callback the callback to use for writing a response Returns:AuthenticationState An Authentication. If Authentication is successful, this will be a `Succeeded`. If a response has been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will implement `AuthenticationState.ResponseSent`. Annotations @Override Exceptions ServerAuthException: if unable to validate request

public AuthenticationState validateRequest(Request req, Response res, Callback callback) throws ServerAuthException

Implements org.eclipse.jetty.security.Authenticator.validateRequest.

Doc from org.eclipse.jetty.security.Authenticator.validateRequest.

Validate a request

Parameters

req:Request: The request
res:Response: The response
callback:Callback: the callback to use for writing a response

Returns:AuthenticationState

An Authentication. If Authentication is successful, this will be a Succeeded. If a response has been sent by the Authenticator (which can be done for both successful and unsuccessful authentications), then the result will implement AuthenticationState.ResponseSent.

Annotations

@Override

Exceptions

ServerAuthException:: if unable to validate request

org.eclipse.jetty.security.authentication back to summary

private Class DigestAuthenticator.Digest

Class Inheritance

extends Credential

java.lang.Object
org.eclipse.jetty.util.security.Credential
org.eclipse.jetty.security.authentication.DigestAuthenticator.Digest

Field Summary

Modifier and Type	Field and Description
pack-priv String	cnonce
pack-priv final String	method
pack-priv String	nc
pack-priv String	nonce
pack-priv String	qop
pack-priv String	realm
pack-priv String	response
private static final long	serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID.
pack-priv String	uri
pack-priv String	username

Constructor Summary

Access	Constructor and Description
pack-priv	Digest(String m)

Method Summary

Modifier and Type	Method and Description
public boolean	check(Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Check a credential
public String	toString() Overrides java.lang.Object.toString. Returns a string representation of the object.

Inherited from org.eclipse.jetty.util.security.Credential:: byteEquals getCredential stringEquals

Field Detail

cnonce	back to summary
pack-priv String cnonce

method	back to summary
pack-priv final String method

nc	back to summary
pack-priv String nc

nonce	back to summary
pack-priv String nonce

qop	back to summary
pack-priv String qop

realm	back to summary
pack-priv String realm

response	back to summary
pack-priv String response

serialVersionUID	back to summary
private static final long serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID. Annotations @Serial

uri	back to summary
pack-priv String uri

username	back to summary
pack-priv String username

Constructor Detail

Digest	back to summary
pack-priv Digest(String m)

Method Detail

check	back to summary
public boolean check(Object credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Doc from org.eclipse.jetty.util.security.Credential.check. Check a credential Parameters credentials:Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. Returns:boolean True if the credentials indicated that the shared secret is known to both this Credential and the passed credential. Annotations @Override

check

back to summary

public boolean check(Object credentials)

Implements abstract org.eclipse.jetty.util.security.Credential.check.

Doc from org.eclipse.jetty.util.security.Credential.check.

Check a credential

Parameters

credentials:Object: The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential.

Returns:boolean

True if the credentials indicated that the shared secret is known to both this Credential and the passed credential.

Annotations

@Override

toString	back to summary
public String toString() Overrides java.lang.Object.toString. Doc from java.lang.Object.toString. Returns a string representation of the object. Returns:String a string representation of the object. Annotations @Override

toString

back to summary

public String toString()

Overrides java.lang.Object.toString.

Doc from java.lang.Object.toString.

Returns a string representation of the object.

Returns:String

a string representation of the object.

Annotations

@Override

org.eclipse.jetty.security.authentication back to summary

private Class DigestAuthenticator.Nonce

Class Inheritance

extends Object

java.lang.Object
org.eclipse.jetty.security.authentication.DigestAuthenticator.Nonce

Field Summary

Modifier and Type	Field and Description
private final AutoLock	_lock
pack-priv final String	_nonce
pack-priv final BitSet	_seen
pack-priv final long	_ts

Constructor Summary

Access	Constructor and Description
public	Nonce(String nonce, long ts, int size)

Method Summary

Modifier and Type	Method and Description
public boolean	seen(int count)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

_lock	back to summary
private final AutoLock _lock

_nonce	back to summary
pack-priv final String _nonce

_seen	back to summary
pack-priv final BitSet _seen

_ts	back to summary
pack-priv final long _ts

Constructor Detail

Nonce	back to summary
public Nonce(String nonce, long ts, int size)

Method Detail

seen	back to summary
public boolean seen(int count)

public Class DigestAuthenticator

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class DigestAuthenticator.Digest

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private Class DigestAuthenticator.Nonce

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail