org.apache.activemq.artemis.spi.core.security

Class ActiveMQJAASSecurityManager

java.lang.Object

org.apache.activemq.artemis.spi.core.security.ActiveMQJAASSecurityManager

All Implemented Interfaces:

ActiveMQSecurityManager, ActiveMQSecurityManager2

public class ActiveMQJAASSecurityManager
extends Object
implements ActiveMQSecurityManager2

This implementation delegates to the JAAS security interfaces. The Subject returned by the login context is expecting to have a set of RolePrincipal for each role of the user.

Constructor Summary

Constructors

Constructor and Description
ActiveMQJAASSecurityManager()
ActiveMQJAASSecurityManager(String configurationName)
ActiveMQJAASSecurityManager(String configurationName, org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)

Method Summary

Modifier and Type	Method and Description
org.apache.activemq.artemis.core.config.impl.SecurityConfiguration	getConfiguration()
void	setConfiguration(org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)
void	setConfigurationName(String configurationName)
boolean	validateUser(String user, String password) is this a valid user.
boolean	validateUser(String user, String password, X509Certificate[] certificates) is this a valid user.
boolean	validateUserAndRole(String user, String password, Set<org.apache.activemq.artemis.core.security.Role> roles, org.apache.activemq.artemis.core.security.CheckType checkType) is this a valid user and do they have the correct role
boolean	validateUserAndRole(String user, String password, Set<org.apache.activemq.artemis.core.security.Role> roles, org.apache.activemq.artemis.core.security.CheckType checkType, String address, RemotingConnection connection) Determine whether the given user is valid and whether they have the correct role for the given destination address.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ActiveMQJAASSecurityManager

public ActiveMQJAASSecurityManager()

ActiveMQJAASSecurityManager

public ActiveMQJAASSecurityManager(String configurationName)

ActiveMQJAASSecurityManager

public ActiveMQJAASSecurityManager(String configurationName,
                                   org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)

Method Detail

validateUser

public boolean validateUser(String user,
                            String password)

Description copied from interface: ActiveMQSecurityManager

is this a valid user.

Specified by:

validateUser in interface ActiveMQSecurityManager

Parameters:

user - the user

password - the users password

Returns:

true if a valid user

validateUser

public boolean validateUser(String user,
                            String password,
                            X509Certificate[] certificates)

Description copied from interface: ActiveMQSecurityManager2

is this a valid user. This method is called instead of ActiveMQSecurityManager.validateUser(String, String).

Specified by:

validateUser in interface ActiveMQSecurityManager2

Parameters:

user - the user

password - the users password

Returns:

true if a valid user

validateUserAndRole

public boolean validateUserAndRole(String user,
                                   String password,
                                   Set<org.apache.activemq.artemis.core.security.Role> roles,
                                   org.apache.activemq.artemis.core.security.CheckType checkType)

Description copied from interface: ActiveMQSecurityManager

is this a valid user and do they have the correct role

Specified by:

validateUserAndRole in interface ActiveMQSecurityManager

Parameters:

user - the user

password - the users password

roles - the roles the user has

checkType - the type of check to perform

Returns:

true if the user is valid and they have the correct roles

validateUserAndRole

public boolean validateUserAndRole(String user,
                                   String password,
                                   Set<org.apache.activemq.artemis.core.security.Role> roles,
                                   org.apache.activemq.artemis.core.security.CheckType checkType,
                                   String address,
                                   RemotingConnection connection)

Description copied from interface: ActiveMQSecurityManager2

Determine whether the given user is valid and whether they have the correct role for the given destination address. This method is called instead of ActiveMQSecurityManager.validateUserAndRole(String, String, Set, CheckType).

Specified by:

validateUserAndRole in interface ActiveMQSecurityManager2

Parameters:

user - the user

password - the user's password

roles - the user's roles

checkType - which permission to validate

address - the address for which to perform authorization

connection - the user's connection

Returns:

true if the user is valid and they have the correct roles for the given destination address

setConfigurationName

public void setConfigurationName(String configurationName)

setConfiguration

public void setConfiguration(org.apache.activemq.artemis.core.config.impl.SecurityConfiguration configuration)

getConfiguration

public org.apache.activemq.artemis.core.config.impl.SecurityConfiguration getConfiguration()