Modifier and Type | Interface and Description |
---|---|
interface |
MessageContext
The authentication framework uses this
MessageContext to pass messages and message
processing state to authentication contexts for processing by authentication modules. |
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
AsyncServerAuthModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Removes any method specific principals and credentials from the client subject.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AsyncServerAuthModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Secures the outgoing response message.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AsyncServerAuthModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Validates the incoming request message.
|
Modifier and Type | Method and Description |
---|---|
static javax.security.auth.message.MessageInfo |
JaspiAdapters.adapt(MessageInfoContext messageInfoContext)
Adapts an
MessageContextInfo into a JASPI MessageInfo . |
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
SessionAuthModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
FailureAuditingAuthModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
AuthModuleUnsupportedMessageTypes.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
AuthModuleTwo.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
AuthModuleOne.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
AuditingSessionAuthModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<Void,AuthenticationException> |
AuditingAuthModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
Does nothing.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
SessionAuthModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-SESSION-SECURE-RESPONSE request header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
FailureAuditingAuthModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Attempts to add to the module audit info, which should not be added, and sets the session id to be audited, which
should be ignored as this module is not a "Session" auth module.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleUnsupportedMessageTypes.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Returns SEND_SUCCESS.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleTwo.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-AUTH-MODULE-TWO-SECURE-RESPONSE request
header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleOne.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-AUTH-MODULE-ONE-SECURE-RESPONSE request
header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuditingSessionAuthModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Attempts to add to the module audit info, which should not be added, and sets the session id to be audited.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuditingAuthModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Attempts to add to the module audit info, which should not be added, and sets the session id to be audited, which
should be ignored as this module is not a "Session" auth module.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
SessionAuthModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-SESSION-VALIDATE_REQUEST request header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
FailureAuditingAuthModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Adds module audit info and sets the principal.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleUnsupportedMessageTypes.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Returns SUCCESS.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleTwo.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-AUTH-MODULE-TWO-VALIDATE-REQUEST request
header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuthModuleOne.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Return value is based on the presents and value of the
X-JASPI-AUTH-MODULE-ONE-VALIDATE-REQUEST request
header. |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuditingSessionAuthModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Adds module audit info and sets the principal.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
AuditingAuthModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Adds module audit info and sets the principal.
|
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
IWAModule.cleanSubject(MessageInfoContext messageInfo,
Subject subject)
Removes any method specific principals and credentials from the client subject.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
IWAModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
Always returns AuthStatus.SEND_SUCCESS.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
IWAModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Validates the request by checking the Authorization header in the request for a IWA token and processes that
for authentication.
|
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
OpenIdConnectModule.cleanSubject(MessageInfoContext messageInfo,
Subject subject)
Nothing to clean.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
OpenIdConnectModule.secureResponse(MessageInfoContext messageInfo,
Subject subject)
Sends SEND_SUCCESS automatically.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
OpenIdConnectModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Attempts to retrieve the value of the specified OpenID Connect header from the messageInfo, then
converts this to a Jwt and attempts to decrypt.
|
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
JwtSessionModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject) |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
JwtSessionModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject) |
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
JwtSessionModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject) |
Modifier and Type | Method and Description |
---|---|
Promise<Void,AuthenticationException> |
OpenAMSessionModule.cleanSubject(MessageInfoContext messageInfo,
Subject clientSubject)
No state to clear out from the client subject.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
OpenAMSessionModule.secureResponse(MessageInfoContext messageInfo,
Subject serviceSubject)
No action to perform on secure response.
|
Promise<javax.security.auth.message.AuthStatus,AuthenticationException> |
OpenAMSessionModule.validateRequest(MessageInfoContext messageInfo,
Subject clientSubject,
Subject serviceSubject)
Validates whether or not the request contains a valid OpenAM SSO Token Id.
|
Copyright © 2025 Open Identity Platform Community. All rights reserved.