org.jbpm.security.authentication
Class SubjectAuthenticationService

java.lang.Object
  org.jbpm.security.authentication.SubjectAuthenticationService

All Implemented Interfaces:

java.io.Serializable, AuthenticationService, Service

public class SubjectAuthenticationService
extends java.lang.Object
implements AuthenticationService

gets the authenticated actor id from the current Subject. This Authenticator is either configured via the SubjectAuthenticationServiceFactory or it requires the two other configuration parameter 'jbpm.authenticator.principal.classname' and 'jbpm.authenticator.principal.allow.overwrite' This configuration property specifies the class name of the principal that should be used from the current subject. This could be for example org.jboss.security.CallerIdentity in an JBoss AS. If not actorId is set, the name of that principal is used as the currently authenticated actorId. If an actorId!=null is set (via setActorId) this one overwrites the principal. This behavior is configurable via the 'jbpm.authenticator.principal.allow.overwrite' attribute. If this is set to false, setActorId is simply ignored.

See Also:

Serialized Form

Constructor Summary

SubjectAuthenticationService()

SubjectAuthenticationService(java.lang.String principalClassName, java.lang.Boolean allowActorIdOverwrite)

Method Summary

void	close()
java.lang.String	getActorId() retrieve the currently authenticated actor
protected void	initPrincipalClass(java.lang.String principalClassName)
void	setActorId(java.lang.String actorId) set the currently authenticated actor.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SubjectAuthenticationService

public SubjectAuthenticationService(java.lang.String principalClassName,
                                    java.lang.Boolean allowActorIdOverwrite)

SubjectAuthenticationService

public SubjectAuthenticationService()

Method Detail

initPrincipalClass

protected void initPrincipalClass(java.lang.String principalClassName)

getActorId

public java.lang.String getActorId()

Description copied from interface: AuthenticationService

retrieve the currently authenticated actor

Specified by:

getActorId in interface AuthenticationService

setActorId

public void setActorId(java.lang.String actorId)

Description copied from interface: AuthenticationService

set the currently authenticated actor. This method maybe ignored by some implementations (e.g. when using JAAS it is not a good idea to change the authenticated actor).

Specified by:

setActorId in interface AuthenticationService

close

public void close()

Specified by:

close in interface Service