org.picketlink.idm.credential.internal

Class DigestCredentialHandler

java.lang.Object

org.picketlink.idm.credential.internal.DigestCredentialHandler

All Implemented Interfaces:

org.picketlink.idm.credential.spi.CredentialHandler

@SupportsCredentials(value={org.picketlink.idm.credential.DigestCredentials.class,org.picketlink.idm.credential.Digest.class})
public class DigestCredentialHandler
extends Object
implements org.picketlink.idm.credential.spi.CredentialHandler

This particular implementation supports the validation of DigestCredentials.

When using this handler, password are always stored using: H(A1) = MD5 (unq(username) ":" unq(realm) ":" password). During the validation this handler will use the stored HA1 to compare with the digest provided by the Digest credential. This is done in two ways, if the credential has the method and uri setted the H(A2) will also be calculated and used to calcutate the final digest as KD ( H(A1), unq(nonce-value) ":" nc-value ":" unq(cnonce-value) ":" unq(qop-value) ":" H(A2) ).

Author:

Shane Bryzak, Pedro Silva

Constructor Summary

Constructors

Constructor and Description
DigestCredentialHandler()

Method Summary

Methods

Modifier and Type	Method and Description
void	setup(org.picketlink.idm.spi.IdentityStore<?> identityStore)
void	update(org.picketlink.idm.spi.SecurityContext context, org.picketlink.idm.model.Agent agent, Object credential, org.picketlink.idm.spi.IdentityStore<?> identityStore, Date effectiveDate, Date expiryDate)
void	validate(org.picketlink.idm.spi.SecurityContext context, org.picketlink.idm.credential.Credentials credentials, org.picketlink.idm.spi.IdentityStore<?> identityStore)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DigestCredentialHandler

public DigestCredentialHandler()

Method Detail

setup

public void setup(org.picketlink.idm.spi.IdentityStore<?> identityStore)

Specified by:

setup in interface org.picketlink.idm.credential.spi.CredentialHandler

validate

public void validate(org.picketlink.idm.spi.SecurityContext context,
            org.picketlink.idm.credential.Credentials credentials,
            org.picketlink.idm.spi.IdentityStore<?> identityStore)

Specified by:

validate in interface org.picketlink.idm.credential.spi.CredentialHandler

update

public void update(org.picketlink.idm.spi.SecurityContext context,
          org.picketlink.idm.model.Agent agent,
          Object credential,
          org.picketlink.idm.spi.IdentityStore<?> identityStore,
          Date effectiveDate,
          Date expiryDate)

Specified by:

update in interface org.picketlink.idm.credential.spi.CredentialHandler