Package com.sun.identity.policy.plugins
Class AuthSchemeCondition
- java.lang.Object
-
- com.sun.identity.policy.plugins.AuthSchemeCondition
-
@Deprecated public class AuthSchemeCondition extends Object implements Condition
Deprecated.UseAuthSchemeConditioninstead.The classAuthSchemeConditionis a plugin implementation ofConditionthat lets you define authentication module instances for which aPolicyapplies.
-
-
Field Summary
Fields Modifier and Type Field Description static StringAPPLICATION_IDLE_TIMESOUT_AT_PREFIXDeprecated.Prefix for key that is used to set session property to track application based session idle timeoutstatic StringFORCE_AUTH_ADVICEDeprecated.Key name that is used to communicate ForceAuth advice.static StringMODULE_INSTANCEDeprecated.Constant for representing authn type of module_intancestatic StringTRUEDeprecated.Constant for representingtrue for ForceAuth-
Fields inherited from interface com.sun.identity.policy.interfaces.Condition
AM_IDENTITY_NAME, APPLICATION_IDLE_TIMEOUT, APPLICATION_NAME, AUTH_LEVEL, AUTH_LEVEL_CONDITION_ADVICE, AUTH_SCHEME, AUTH_SCHEME_CONDITION_ADVICE, AUTHENTICATE_TO_REALM, AUTHENTICATE_TO_REALM_CONDITION_ADVICE, AUTHENTICATE_TO_SERVICE, AUTHENTICATE_TO_SERVICE_CONDITION_ADVICE, DNS_NAME, END_DATE, END_DAY, END_IP, END_TIME, ENFORCEMENT_TIME_ZONE, INVOCATOR_PRINCIPAL_UUID, LDAP_FILTER, MAX_SESSION_TIME, REQUEST_AUTH_LEVEL, REQUEST_AUTH_SCHEMES, REQUEST_AUTHENTICATED_TO_REALMS, REQUEST_AUTHENTICATED_TO_SERVICES, REQUEST_DNS_NAME, REQUEST_IP, REQUEST_TIME_ZONE, START_DATE, START_DAY, START_IP, START_TIME, TERMINATE_SESSION, VALUE_CASE_INSENSITIVE
-
-
Constructor Summary
Constructors Constructor Description AuthSchemeCondition()Deprecated.No argument constructor
-
Method Summary
All Methods Instance Methods Concrete Methods Deprecated Methods Modifier and Type Method Description Objectclone()Deprecated.Returns a copy of this object.ConditionDecisiongetConditionDecision(SSOToken token, Map env)Deprecated.Gets the decision computed by this condition object, based on the map of environment parametersStringgetDisplayName(String property, Locale locale)Deprecated.Gets the display name for the property name.MapgetProperties()Deprecated.Gets the properties of the condition.ListgetPropertyNames()Deprecated.Returns a list of property names for the condition.SyntaxgetPropertySyntax(String property)Deprecated.Returns the syntax for a property nameSetgetValidValues(String property)Deprecated.Returns a set of valid values given the property name.voidsetProperties(Map properties)Deprecated.Sets the properties of the condition.
-
-
-
Field Detail
-
APPLICATION_IDLE_TIMESOUT_AT_PREFIX
public static final String APPLICATION_IDLE_TIMESOUT_AT_PREFIX
Deprecated.Prefix for key that is used to set session property to track application based session idle timeout- See Also:
- Constant Field Values
-
FORCE_AUTH_ADVICE
public static final String FORCE_AUTH_ADVICE
Deprecated.Key name that is used to communicate ForceAuth advice. This indicates to authentication service that user needs to authenticate again even if he has already authenticated to required module instance, chain, level or realm.- See Also:
- Constant Field Values
-
TRUE
public static final String TRUE
Deprecated.Constant for representingtrue for ForceAuth- See Also:
- Constant Field Values
-
MODULE_INSTANCE
public static final String MODULE_INSTANCE
Deprecated.Constant for representing authn type of module_intance- See Also:
- Constant Field Values
-
-
Method Detail
-
getPropertyNames
public List getPropertyNames()
Deprecated.Returns a list of property names for the condition.- Specified by:
getPropertyNamesin interfaceCondition- Returns:
- list of property names
-
getPropertySyntax
public Syntax getPropertySyntax(String property)
Deprecated.Returns the syntax for a property name- Specified by:
getPropertySyntaxin interfaceCondition- Parameters:
property- property name- Returns:
Syntaxfor the property name- See Also:
Syntax
-
getDisplayName
public String getDisplayName(String property, Locale locale) throws PolicyException
Deprecated.Gets the display name for the property name. Thelocalevariable could be used by the plugin to customize the display name for the given locale. Thelocalevariable could benull, in which case the plugin must use the default locale.- Specified by:
getDisplayNamein interfaceCondition- Parameters:
property- property namelocale- locale for which the property name must be customized- Returns:
- display name for the property name
- Throws:
PolicyException
-
getValidValues
public Set getValidValues(String property) throws PolicyException
Deprecated.Returns a set of valid values given the property name. This method is called if the property Syntax is either the SINGLE_CHOICE or MULTIPLE_CHOICE.- Specified by:
getValidValuesin interfaceCondition- Parameters:
property- property name- Returns:
- Set of valid values for the property.
- Throws:
PolicyException- if unable to get the Syntax.
-
setProperties
public void setProperties(Map properties) throws PolicyException
Deprecated.Sets the properties of the condition. Evaluation ofConditionDecisionis influenced by these properties.- Specified by:
setPropertiesin interfaceCondition- Parameters:
properties- the properties of the condition that governs whether a policy applies. The properties should define value for the keyAUTH_SCHEME. The value should be a Set with only one element. The element should be a String, the authentication module instance name. Please note that properties is not cloned by the method.- Throws:
PolicyException- if properties is null or does not contain value for the keyAUTH_SCHEMEor the value of the key is not a Set with one String element- See Also:
Condition.REQUEST_AUTH_SCHEMES
-
getProperties
public Map getProperties()
Deprecated.Gets the properties of the condition.- Specified by:
getPropertiesin interfaceCondition- Returns:
- unmodifiable map view of properties that govern the evaluation of the condition. Please note that properties is not cloned before returning
- See Also:
setProperties(Map)
-
getConditionDecision
public ConditionDecision getConditionDecision(SSOToken token, Map env) throws PolicyException, SSOException
Deprecated.Gets the decision computed by this condition object, based on the map of environment parameters- Specified by:
getConditionDecisionin interfaceCondition- Parameters:
token- single sign on token of the userenv- request specific environment map of key/value pairsAuthSchemeConditionlooks for value of keyREQUEST_AUTH_SCHEHMESin the map. The value should be a String. If theenvparameter is null or does not define the value for, value for REQUEST_AUTH_SCHEMESis computed usingAuthMethodobtained from single sign on token of the user.- Returns:
- the condition decision. The condition decision encapsulates
whether a policy applies for the request and advice messages
generated by the condition.
Policy framework continues evaluating a policy only if it applies
to the request as indicated by the
ConditionDecision. Otherwise, further evaluation of the policy is skipped. However, the advice messages encapsulated in theConditionDecisionare aggregated and passed up, encapsulated in the policy decision. - Throws:
PolicyException- if the condition has not been initialized with a successful call tosetProperties(Map)and/or the value ofREQUEST_AUTH_SCHEMEScould not be determined.SSOException- if the token is invalid- See Also:
setProperties(Map),Condition.AUTH_SCHEME,Condition.REQUEST_AUTH_SCHEMES,ConditionDecision
-
-