Uses of Class
org.forgerock.caf.authentication.api.AuthenticationException
Package
Description
This package defines the core interfaces and classes to provide an asynchronous and improved
JASPI-like message authentication API.
This package defines the authentication framework classes for the authentication of messages
via authentication contexts and modules.
This package contains classes which form the Open ID Connect JASPIc AuthN module.
This package contains classes for the Jwt Session JASPI Authentication Module.
-
Uses of AuthenticationException in org.forgerock.caf.authentication.api
Modifier and TypeMethodDescriptionAsyncServerAuthContext.cleanSubject
(MessageContext context, Subject clientSubject) Removes any method specific principals and credentials from the client subject.AsyncServerAuthModule.cleanSubject
(MessageInfoContext messageInfo, Subject clientSubject) Removes any method specific principals and credentials from the client subject.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> AsyncServerAuthContext.secureResponse
(MessageContext context, Subject serviceSubject) Secures the outgoing response message.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> AsyncServerAuthModule.secureResponse
(MessageInfoContext messageInfo, Subject serviceSubject) Secures the outgoing response message.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> AsyncServerAuthContext.validateRequest
(MessageContext context, Subject clientSubject, Subject serviceSubject) Validates the incoming request message.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> AsyncServerAuthModule.validateRequest
(MessageInfoContext messageInfo, Subject clientSubject, Subject serviceSubject) Validates the incoming request message.Modifier and TypeMethodDescriptionvoid
AsyncServerAuthModule.initialize
(javax.security.auth.message.MessagePolicy requestPolicy, javax.security.auth.message.MessagePolicy responsePolicy, CallbackHandler handler, Map<String, Object> options) Initialize this module with request and response message policies to enforce, aCallbackHandler
, and any module specific configuration properties. -
Uses of AuthenticationException in org.forgerock.caf.authentication.framework
Modifier and TypeClassDescriptionfinal class
An authentication exception which signifies that authentication of the request has failed and an appropriate unauthorized response should be returned to the client.Modifier and TypeMethodDescriptionFallbackAuthContext.cleanSubject
(MessageContext context, Subject clientSubject) Calls eachAsyncServerAuthContext
in parallel to clean the client subject and only return a successful promise if all complete successfully otherwise returns the first exception in a failed promise.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> FallbackAuthContext.secureResponse
(MessageContext context, Subject serviceSubject) Secures the response message using the sameAsyncServerAuthModule
that authenticated the incoming request message.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> FallbackAuthContext.validateRequest
(MessageContext context, Subject clientSubject, Subject serviceSubject) Authenticates the incoming request message by calling eachAsyncServerAuthModule
in order until an auth module returns anAuthStatus
value other thanSEND_FAILURE
, or returns anAuthenticationException
or the end of the module list is reached.Modifier and TypeMethodDescriptionvoid
ResponseWriter.write
(MessageContext context, AuthenticationException exception) Write the details of the exception out, and set the content type of the response.Modifier and TypeMethodDescriptionAuthenticationFilter.AuthenticationFilterBuilder.build()
Creates a newJaspiRuntimeFilter
instance based on the configuration provided. -
Uses of AuthenticationException in org.forgerock.jaspi.modules.openid
Modifier and TypeMethodDescriptionOpenIdConnectModule.cleanSubject
(MessageInfoContext messageInfo, Subject subject) Nothing to clean.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> OpenIdConnectModule.secureResponse
(MessageInfoContext messageInfo, Subject subject) Sends SEND_SUCCESS automatically.Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> OpenIdConnectModule.validateRequest
(MessageInfoContext messageInfo, Subject clientSubject, Subject serviceSubject) Attempts to retrieve the value of the specified OpenID Connect header from the messageInfo, then converts this to a Jwt and attempts to decrypt.Modifier and TypeMethodDescriptionvoid
OpenIdConnectModule.initialize
(javax.security.auth.message.MessagePolicy requestPolicy, javax.security.auth.message.MessagePolicy responsePolicy, CallbackHandler callbackHandler, Map<String, Object> config) Initialize this module with request and response message policies to enforce, aCallbackHandler
, and any module specific configuration properties. -
Uses of AuthenticationException in org.forgerock.jaspi.modules.session.jwt
Modifier and TypeMethodDescriptionJwtSessionModule.cleanSubject
(MessageInfoContext messageInfo, Subject clientSubject) Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> JwtSessionModule.secureResponse
(MessageInfoContext messageInfo, Subject serviceSubject) Promise<javax.security.auth.message.AuthStatus,
AuthenticationException> JwtSessionModule.validateRequest
(MessageInfoContext messageInfo, Subject clientSubject, Subject serviceSubject) Modifier and TypeMethodDescriptionvoid
AbstractJwtSessionModule.initialize
(CallbackHandler handler, Map options) Initialises the module by getting the Keystore and Key alias properties out of the module configuration.void
FallbackJwtCryptographyHandler.initialize
(Map<String, Object> options) void
JwtCryptographyHandler.initialize
(Map<String, Object> options) Initialise the handler.void
JwtSessionModule.initialize
(javax.security.auth.message.MessagePolicy requestPolicy, javax.security.auth.message.MessagePolicy responsePolicy, CallbackHandler handler, Map<String, Object> options) void
KeyStoreJwtCryptographyHandler.initialize
(Map<String, Object> options) Deprecated.javax.security.auth.message.AuthStatus
AbstractJwtSessionModule.secureResponse
(javax.security.auth.message.MessageInfo messageInfo) Creates a JWT after a successful authentication and sets it as a Cookie on the response.javax.security.auth.message.AuthStatus
AbstractJwtSessionModule.validateRequest
(javax.security.auth.message.MessageInfo messageInfo, Subject clientSubject) Checks for the presence of the JWT as a Cookie on the request and validates the signature and decrypts it and checks the expiration time of the JWT.