Modifier and Type	Class and Description
public static class	Credential.Crypt Unix Crypt Credentials
public static class	Credential.MD5 MD5 Credentials

Modifier and Type	Field and Description
private static final List<CredentialProvider>	CREDENTIAL_PROVIDERS
private static final long	serialVersionUID

Access	Constructor and Description
public	Credential()

Method Summary

Modifier and Type	Method and Description
protected static boolean	Returns: whether the two byte arrays are equal byteEquals(byte[] the first byte array to compare (should be known value) known, byte[] the second byte array to compare (should be unknown value) unknown) Utility method that replaces Arrays.equals() to avoid timing attacks.
public abstract boolean	Returns: True if the credentials indicated that the shared secret is known to both this Credential and the passed credential. check(Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. credentials) Check a credential
public static Credential	Returns: A Credential or Password instance. getCredential(String String representation of the credential credential) Get a credential from a String.
protected static boolean	Returns: whether the two strings are equal stringEquals(String the first string to compare (should be known string) known, String the second string to compare (should be the unknown string) unknown) Utility method that replaces String.equals() to avoid timing attacks.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

CREDENTIAL_PROVIDERS	back to summary
private static final List<CredentialProvider> CREDENTIAL_PROVIDERS

serialVersionUID	back to summary
private static final long serialVersionUID

Constructor Detail

Credential	back to summary
public Credential()

Method Detail

byteEquals	back to summary
protected static boolean byteEquals(byte[] known, byte[] unknown) Utility method that replaces Arrays.equals() to avoid timing attacks. The length of the loop executed will always be the length of the unknown credential Parameters known:byte[] the first byte array to compare (should be known value) unknown:byte[] the second byte array to compare (should be unknown value) Returns:boolean whether the two byte arrays are equal

byteEquals

back to summary

protected static boolean byteEquals(byte[] known, byte[] unknown)

Utility method that replaces Arrays.equals() to avoid timing attacks. The length of the loop executed will always be the length of the unknown credential

Parameters

known:byte[]: the first byte array to compare (should be known value)
unknown:byte[]: the second byte array to compare (should be unknown value)

Returns:boolean

whether the two byte arrays are equal

check	back to summary
public abstract boolean check(Object credentials) Check a credential Parameters credentials:Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. Returns:boolean True if the credentials indicated that the shared secret is known to both this Credential and the passed credential.

check

back to summary

public abstract boolean check(Object credentials)

Check a credential

Parameters

credentials:Object: The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential.

Returns:boolean

True if the credentials indicated that the shared secret is known to both this Credential and the passed credential.

getCredential	back to summary
public static Credential getCredential(String credential) Get a credential from a String. If the credential String starts with a known Credential type (eg "CRYPT:" or "MD5:" ) then a Credential of that type is returned. Otherwise, it tries to find a credential provider whose prefix matches with the start of the credential String. Else the credential is assumed to be a Password. Parameters credential:String String representation of the credential Returns:Credential A Credential or Password instance.

getCredential

back to summary

public static Credential getCredential(String credential)

Get a credential from a String. If the credential String starts with a known Credential type (eg "CRYPT:" or "MD5:" ) then a Credential of that type is returned. Otherwise, it tries to find a credential provider whose prefix matches with the start of the credential String. Else the credential is assumed to be a Password.

Parameters

credential:String: String representation of the credential

Returns:Credential

A Credential or Password instance.

stringEquals	back to summary
protected static boolean stringEquals(String known, String unknown) Utility method that replaces String.equals() to avoid timing attacks. The length of the loop executed will always be the length of the unknown credential Parameters known:String the first string to compare (should be known string) unknown:String the second string to compare (should be the unknown string) Returns:boolean whether the two strings are equal

stringEquals

back to summary

protected static boolean stringEquals(String known, String unknown)

Utility method that replaces String.equals() to avoid timing attacks. The length of the loop executed will always be the length of the unknown credential

Parameters

known:String: the first string to compare (should be known string)
unknown:String: the second string to compare (should be the unknown string)

Returns:boolean

whether the two strings are equal

org.eclipse.jetty.util.security back to summary

public Class Credential.Crypt

Class Inheritance

extends Credential

java.lang.Object
org.eclipse.jetty.util.security.Credential
org.eclipse.jetty.util.security.Credential.Crypt

Unix Crypt Credentials

Field Summary

Modifier and Type	Field and Description
private static final String	__TYPE
private final String	_cooked
private static final long	serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID.

Constructor Summary

Access	Constructor and Description
pack-priv	Crypt(String cooked)

Method Summary

Modifier and Type	Method and Description
public boolean	check(Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Check a credential
public static String	crypt(String user, String pw)
public boolean	equals(Object the reference object with which to compare. credential) Overrides java.lang.Object.equals. Indicates whether some other object is "equal to" this one.

Inherited from org.eclipse.jetty.util.security.Credential:: byteEquals getCredential stringEquals

Field Detail

__TYPE	back to summary
private static final String __TYPE

_cooked	back to summary
private final String _cooked

serialVersionUID	back to summary
private static final long serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID.

Constructor Detail

Crypt	back to summary
pack-priv Crypt(String cooked)

Method Detail

check	back to summary
public boolean check(Object credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Doc from org.eclipse.jetty.util.security.Credential.check. Check a credential Parameters credentials:Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. Returns:boolean True if the credentials indicated that the shared secret is known to both this Credential and the passed credential. Annotations @Override

check

back to summary

public boolean check(Object credentials)

Implements abstract org.eclipse.jetty.util.security.Credential.check.

Doc from org.eclipse.jetty.util.security.Credential.check.

Check a credential

Parameters

credentials:Object: The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential.

Returns:boolean

True if the credentials indicated that the shared secret is known to both this Credential and the passed credential.

Annotations

@Override

crypt	back to summary
public static String crypt(String user, String pw)

equals back to summary

equals	back to summary
public boolean equals(Object credential) Overrides java.lang.Object.equals. Doc from java.lang.Object.equals. Indicates whether some other object is "equal to" this one. The `equals` method implements an equivalence relation on non-null object references: It is reflexive: for any non-null reference value `x`, `x.equals(x)` should return `true`. It is symmetric: for any non-null reference values `x` and `y`, `x.equals(y)` should return `true` if and only if `y.equals(x)` returns `true`. It is transitive: for any non-null reference values `x`, `y`, and `z`, if `x.equals(y)` returns `true` and `y.equals(z)` returns `true`, then `x.equals(z)` should return `true`. It is consistent: for any non-null reference values `x` and `y`, multiple invocations of `x.equals(y)` consistently return `true` or consistently return `false`, provided no information used in `equals` comparisons on the objects is modified. For any non-null reference value `x`, `x.equals(null)` should return `false`. An equivalence relation partitions the elements it operates on into equivalence classes; all the members of an equivalence class are equal to each other. Members of an equivalence class are substitutable for each other, at least for some purposes. Parameters credential:Object the reference object with which to compare. Returns:boolean `true` if this object is the same as the obj argument; `false` otherwise. Annotations @Override

public boolean equals(Object credential)

Overrides java.lang.Object.equals.

Doc from java.lang.Object.equals.

Indicates whether some other object is "equal to" this one.

The equals method implements an equivalence relation on non-null object references:

It is reflexive: for any non-null reference value x, x.equals(x) should return true.
It is symmetric: for any non-null reference values x and y, x.equals(y) should return true if and only if y.equals(x) returns true.
It is transitive: for any non-null reference values x, y, and z, if x.equals(y) returns true and y.equals(z) returns true, then x.equals(z) should return true.
It is consistent: for any non-null reference values x and y, multiple invocations of x.equals(y) consistently return true or consistently return false, provided no information used in equals comparisons on the objects is modified.
For any non-null reference value x, x.equals(null) should return false.

An equivalence relation partitions the elements it operates on into equivalence classes; all the members of an equivalence class are equal to each other. Members of an equivalence class are substitutable for each other, at least for some purposes.

Parameters

credential:Object: the reference object with which to compare.

Returns:boolean

true if this object is the same as the obj argument; false otherwise.

Annotations

@Override

org.eclipse.jetty.util.security back to summary

public Class Credential.MD5

Class Inheritance

extends Credential

java.lang.Object
org.eclipse.jetty.util.security.Credential
org.eclipse.jetty.util.security.Credential.MD5

MD5 Credentials

Field Summary

Modifier and Type	Field and Description
private static MessageDigest	__md
private static final AutoLock	__md5Lock
private static final String	__TYPE
private final byte[]	_digest
private static final long	serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID.

Constructor Summary

Access	Constructor and Description
pack-priv	MD5(String digest)

Method Summary

Modifier and Type	Method and Description
public boolean	check(Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Check a credential
public static String	digest(String password) Used only by Command Line Password utility
public boolean	equals(Object the reference object with which to compare. obj) Overrides java.lang.Object.equals. Indicates whether some other object is "equal to" this one.
public byte[]	getDigest()

Inherited from org.eclipse.jetty.util.security.Credential:: byteEquals getCredential stringEquals

Field Detail

__md	back to summary
private static MessageDigest __md

__md5Lock	back to summary
private static final AutoLock __md5Lock

__TYPE	back to summary
private static final String __TYPE

_digest	back to summary
private final byte[] _digest

serialVersionUID	back to summary
private static final long serialVersionUID Hides org.eclipse.jetty.util.security.Credential.serialVersionUID.

Constructor Detail

MD5	back to summary
pack-priv MD5(String digest)

Method Detail

check	back to summary
public boolean check(Object credentials) Implements abstract org.eclipse.jetty.util.security.Credential.check. Doc from org.eclipse.jetty.util.security.Credential.check. Check a credential Parameters credentials:Object The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential. Returns:boolean True if the credentials indicated that the shared secret is known to both this Credential and the passed credential. Annotations @Override

check

back to summary

public boolean check(Object credentials)

Implements abstract org.eclipse.jetty.util.security.Credential.check.

Doc from org.eclipse.jetty.util.security.Credential.check.

Check a credential

Parameters

credentials:Object: The credential to check against. This may either be another Credential object, a Password object or a String which is interpreted by this credential.

Returns:boolean

True if the credentials indicated that the shared secret is known to both this Credential and the passed credential.

Annotations

@Override

digest	back to summary
public static String digest(String password) Used only by Command Line Password utility

equals back to summary

equals	back to summary
public boolean equals(Object obj) Overrides java.lang.Object.equals. Doc from java.lang.Object.equals. Indicates whether some other object is "equal to" this one. The `equals` method implements an equivalence relation on non-null object references: It is reflexive: for any non-null reference value `x`, `x.equals(x)` should return `true`. It is symmetric: for any non-null reference values `x` and `y`, `x.equals(y)` should return `true` if and only if `y.equals(x)` returns `true`. It is transitive: for any non-null reference values `x`, `y`, and `z`, if `x.equals(y)` returns `true` and `y.equals(z)` returns `true`, then `x.equals(z)` should return `true`. It is consistent: for any non-null reference values `x` and `y`, multiple invocations of `x.equals(y)` consistently return `true` or consistently return `false`, provided no information used in `equals` comparisons on the objects is modified. For any non-null reference value `x`, `x.equals(null)` should return `false`. An equivalence relation partitions the elements it operates on into equivalence classes; all the members of an equivalence class are equal to each other. Members of an equivalence class are substitutable for each other, at least for some purposes. Parameters obj:Object the reference object with which to compare. Returns:boolean `true` if this object is the same as the obj argument; `false` otherwise. Annotations @Override

public boolean equals(Object obj)

Overrides java.lang.Object.equals.

Doc from java.lang.Object.equals.

Indicates whether some other object is "equal to" this one.

The equals method implements an equivalence relation on non-null object references:

It is reflexive: for any non-null reference value x, x.equals(x) should return true.
It is symmetric: for any non-null reference values x and y, x.equals(y) should return true if and only if y.equals(x) returns true.
It is transitive: for any non-null reference values x, y, and z, if x.equals(y) returns true and y.equals(z) returns true, then x.equals(z) should return true.
It is consistent: for any non-null reference values x and y, multiple invocations of x.equals(y) consistently return true or consistently return false, provided no information used in equals comparisons on the objects is modified.
For any non-null reference value x, x.equals(null) should return false.

Parameters

obj:Object: the reference object with which to compare.

Returns:boolean

true if this object is the same as the obj argument; false otherwise.

Annotations

@Override

getDigest	back to summary
public byte[] getDigest()

public abstract Class Credential

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public Class Credential.Crypt

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

public Class Credential.MD5

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail