Uses of Class
net.shibboleth.idp.authn.context.AuthenticationContext
Packages that use AuthenticationContext
Package
Description
APIs related to the authentication of a subject.
Context classes for managing authentication-related state.
Functions for traversing authentication contexts.
-
Uses of AuthenticationContext in net.shibboleth.idp.authn
Fields in net.shibboleth.idp.authn declared as AuthenticationContextModifier and TypeFieldDescriptionprivate AuthenticationContextAbstractAuthenticationAction.authnContextAuthenticationContext to operate on.Fields in net.shibboleth.idp.authn with type parameters of type AuthenticationContextModifier and TypeFieldDescriptionAbstractAuthenticationAction.authnCtxLookupStrategyStrategy used to extract, and create if necessary, theAuthenticationContextfrom theProfileRequestContext.AbstractUsernamePasswordCredentialValidator.usernamePasswordContextLookupStrategyLookup strategy for UP context.Methods in net.shibboleth.idp.authn that return AuthenticationContextModifier and TypeMethodDescriptionprivate AuthenticationContextAbstractAuthenticationAction.getAuthenticationContext()null safe getter.Methods in net.shibboleth.idp.authn with parameters of type AuthenticationContextModifier and TypeMethodDescriptionprotected voidAbstractValidationAction.buildAuthenticationResult(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Normally called upon successful completion of credential validation, calls theAbstractValidationAction.populateSubject(Subject)abstract method, stores anAuthenticationResultin theAuthenticationContext, and attaches aSubjectCanonicalizationContextto theProfileRequestContextin preparation for c14n to occur.protected voidAbstractAuthenticationAction.doExecute(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Performs this authentication action.protected booleanAbstractAuthenticationAction.doPreExecute(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Performs this authentication action's pre-execute step.protected booleanAbstractValidationAction.doPreExecute(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext) Performs this authentication action's pre-execute step.protected abstract SubjectAbstractCredentialValidator.doValidate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler) Override method for subclasses to use to perform the actual validation.protected abstract SubjectAbstractUsernamePasswordCredentialValidator.doValidate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, UsernamePasswordContext usernamePasswordContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler) Override method for subclasses to use to perform the actual validation.protected SubjectAbstractUsernamePasswordCredentialValidator.doValidate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler) Override method for subclasses to use to perform the actual validation.protected voidAbstractValidationAction.handleError(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, Exception e, String eventId) Adds an exception encountered during the action to anAuthenticationErrorContext, creating one if necessary, beneath theAuthenticationContext.protected voidAbstractValidationAction.handleError(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, String message, String eventId) Evaluates a message as a potential match as a "classified" error and if matched, the classification label is attached to anAuthenticationErrorContextand used as the resulting event for the action.voidCredentialValidator.ErrorHandler.handleError(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, Exception e, String eventId) Reports an error state to the caller.voidCredentialValidator.ErrorHandler.handleError(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, String message, String eventId) Reports an error state to the caller.protected voidAbstractValidationAction.handleWarning(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, String message, String eventId) Evaluates a message as a potential match as a "classified" warning and if matched, the classification label is attached to anAuthenticationWarningContextand used as the resulting event for the action.voidCredentialValidator.WarningHandler.handleWarning(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, String message, String eventId) Reports a warning state to the caller.AbstractCredentialValidator.validate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler) Validate any credentials found in a supported form within the input context tree and produce aSubjectas the outcome.CredentialValidator.validate(ProfileRequestContext profileRequestContext, AuthenticationContext authenticationContext, CredentialValidator.WarningHandler warningHandler, CredentialValidator.ErrorHandler errorHandler) Validate any credentials found in a supported form within the input context tree and produce aSubjectas the outcome.Method parameters in net.shibboleth.idp.authn with type arguments of type AuthenticationContextModifier and TypeMethodDescriptionvoidAbstractAuthenticationAction.setAuthenticationContextLookupStrategy(Function<ProfileRequestContext, AuthenticationContext> strategy) Set the context lookup strategy.voidAbstractUsernamePasswordCredentialValidator.setUsernamePasswordContextLookupStrategy(Function<AuthenticationContext, UsernamePasswordContext> strategy) Set the lookup strategy to locate theUsernamePasswordContext. -
Uses of AuthenticationContext in net.shibboleth.idp.authn.context
Methods in net.shibboleth.idp.authn.context that return AuthenticationContextModifier and TypeMethodDescriptionAuthenticationContext.setActiveResults(Iterable<AuthenticationResult> results) Set the authentication results currently active for the subject.AuthenticationContext.setAttemptedFlow(AuthenticationFlowDescriptor flow) Set the authentication flow that was attempted in order to authenticate the user.AuthenticationContext.setAuthenticatingAuthority(String authority) Sets the identifier or location, depending on protocol, of an authentication system to use as a proxied source of authentication.AuthenticationContext.setAuthenticationResult(AuthenticationResult result) Set the authentication result produced by the attempted flow, or reused for SSO.AuthenticationContext.setCompletionInstant()Set the completion time of the authentication attempt to the current time.AuthenticationContext.setFixedEventLookupStrategy(Function<ProfileRequestContext, String> strategy) Set optional lookup strategy to return a fixed event to return from credential validation to exercise error and warning logic.AuthenticationContext.setForceAuthn(boolean force) Set whether to require fresh subject interaction to succeed.AuthenticationContext.setHintedName(String hint) Set a non-normative hint provided by the request about the user's identity.AuthenticationContext.setIsPassive(boolean passive) Set whether subject interaction is allowed.Set duration since anAuthenticationResultwas created that allows it to be reused for this request.AuthenticationContext.setPrincipalEvalPredicateFactoryRegistry(PrincipalEvalPredicateFactoryRegistry registry) Set the registry of predicate factories for custom principal evaluation to inject into instances ofRequestedPrincipalContextcreated via theaddRequestedPrincipalContext(String, List, boolean)helper method.AuthenticationContext.setProxyCount(Integer count) Set the allowable number of hops upstream to permit for proxied authentication.AuthenticationContext.setRequiredName(String name) Set a normative hint provided by the request about the user's identity.AuthenticationContext.setSignaledFlowId(String id) Set the flow ID signaled as the next selection.