Package org.forgerock.opendj.rest2ldap.authz
package org.forgerock.opendj.rest2ldap.authz
This package contains
Filter
to authenticate and authorize LDAP connections. Authorization
filter injects a SecurityContext
populated with authorization information like
user's id, user's DN or anything else. This SecurityContext
can then be used
by ProxiedAuthV2Filter
to inject an
LdapClientContext
containing the
Connection
with user specific privileges.-
ClassDescriptionFactory methods of
AuthenticationStrategy
allowing to perform authentication against LDAP server through different method.Authenticate a user and create aSecurityContext
as a result.Factory methods to createFilter
performing authentication and authorizations.Encapsulate aConditionalFilters.Condition
which must be fulfilled in order to apply the Filter.Condition which have to be fulfilled in order to apply theFilter
.Encapsulate aFilter
which will be processed only if the attachedConditionalFilters.Condition
is true.Factory method for function extracting credentials from HTTP requestHeaders
.Factory class for various Jwt classes.ASecretsProvider
whose clock is accessible.A class used to verify whether a givenSignedJwt
is valid.A factory class to generateSignedJwt
.Factory methods to buildFilter
s that handle the JWT mechanism.A context containing aJwtFactories.SignedJwtFactory
to sign authentication requests with a JWT.This class holds various methods and classes to manage someSecretStore
s.SecretStores.SecretKeyGenerator<S extends SecretKey>Interface forSecretKey
generators.ThisSecretStore
uses aSecretStores.SecretKeyGenerator
to produce secrets based on the secret key generated by theSecretKeyGenerator
.