AuthenticationUtils

public class AuthenticationUtils

Useful static methods, mainly for parsing and serializing SessionTokens by the means of web cookies and producing session timeout cookies.

Author:

tf

Fields

Methods

createSessionTimeoutCookie

public static CookieSetting createSessionTimeoutCookie(SessionToken token)

Create a session timeout cookie. The value is a plain UTC timestamp which tells the user how long his session will stay active. This cookie will be ignored by the server and carries only additional information for the user interfaces (E.g. they can remind the user before her session is expiring or do an auto-logout based on this timestamp). Of course, the cookie will be flagged with httpOnly:false (but secure:true).

Parameters:

  • token – a SessionToken

createSessionTokenCookie

public static CookieSetting createSessionTokenCookie(SelfValidatingAuthenticationToken token)

getAuthorizationInfo

public static AuthorizationInfo getAuthorizationInfo(Subject user)

getLogoutCookies

public static Collection<? extends CookieSetting> getLogoutCookies()

getLogoutSessionTokenCookie

public static CookieSetting getLogoutSessionTokenCookie()

getRoles

public static Collection<String> getRoles(Subject user)

isAnonymous

public static boolean isAnonymous(Subject user)

isAnonymous

public static boolean isAnonymous(Principal principal)

isFromOneTimeTokenRealm

public static boolean isFromOneTimeTokenRealm(Subject subject)

isResponsibleAgentExistent

public static boolean isResponsibleAgentExistent(ResponsibleAgent agent)

parseSessionTokenCookie

public static SelfValidatingAuthenticationToken parseSessionTokenCookie(Cookie cookie)

Parse a SessionToken from a cookie with optional cryptographic curry.

Parameters:

  • cookie –

  • curry –

Returns:

A new SessionToken

See also: {@linkAuthenticationUtils.createSessionTokenCookie(SessionToken)},{@linkSessionToken}