org.picketlink.idm.credential.handler

Class DigestCredentialHandler<S,V,U>

java.lang.Object

org.picketlink.idm.credential.handler.AbstractCredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

org.picketlink.idm.credential.handler.DigestCredentialHandler<S,V,U>

All Implemented Interfaces:

CredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

@SupportsCredentials(credentialClass={DigestCredentials.class,Digest.class},
                     credentialStorage=DigestCredentialStorage.class)
public class DigestCredentialHandler<S,V,U>
extends AbstractCredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

This particular implementation supports the validation of DigestCredentials.

When using this handler, password are always stored using: H(A1) = MD5 (unq(username) ":" unq(realm) ":" password). During the validation this handler will use the stored HA1 to compare with the digest provided by the Digest credential. This is done in two ways, if the credential has the method and uri setted the H(A2) will also be calculated and used to calcutate the final digest as KD ( H(A1), unq(nonce-value) ":" nc-value ":" unq(cnonce-value) ":" unq(qop-value) ":" H(A2) ).

Author:

Shane Bryzak, Pedro Silva

Field Summary

Fields inherited from interface org.picketlink.idm.credential.handler.CredentialHandler

LOGIN_NAME_PROPERTY, SUPPORTED_ACCOUNT_TYPES_PROPERTY

Constructor Summary

Constructors

Constructor and Description
DigestCredentialHandler()

Method Summary

Methods

Modifier and Type	Method and Description
protected Account	getAccount(IdentityContext context, DigestCredentials credentials)
protected CredentialStorage	getCredentialStorage(IdentityContext context, Account account, DigestCredentials credentials, CredentialStore<?> store)
void	update(IdentityContext context, Account account, Digest digest, CredentialStore<?> store, Date effectiveDate, Date expiryDate)
protected boolean	validateCredential(IdentityContext context, CredentialStorage credentialStorage, DigestCredentials credentials)

Methods inherited from class org.picketlink.idm.credential.handler.AbstractCredentialHandler

getAccount, getDefaultLoginNameProperty, getIdentityManager, isDebugEnabled, setup, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DigestCredentialHandler

public DigestCredentialHandler()

Method Detail

getAccount

protected Account getAccount(IdentityContext context,
                 DigestCredentials credentials)

Specified by:

getAccount in class AbstractCredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

getCredentialStorage

protected CredentialStorage getCredentialStorage(IdentityContext context,
                                     Account account,
                                     DigestCredentials credentials,
                                     CredentialStore<?> store)

Specified by:

getCredentialStorage in class AbstractCredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

validateCredential

protected boolean validateCredential(IdentityContext context,
                         CredentialStorage credentialStorage,
                         DigestCredentials credentials)

Specified by:

validateCredential in class AbstractCredentialHandler<CredentialStore<?>,DigestCredentials,Digest>

update

public void update(IdentityContext context,
          Account account,
          Digest digest,
          CredentialStore<?> store,
          Date effectiveDate,
          Date expiryDate)