ch.elca.el4j.services.security.authentication
Class SecureUsernamePasswordAuthenticationServiceContextPasser

java.lang.Object
  ch.elca.el4j.core.contextpassing.AbstractImplicitContextPasser
      ch.elca.el4j.services.security.authentication.AuthenticationServiceContextPasser
          ch.elca.el4j.services.security.authentication.SecureUsernamePasswordAuthenticationServiceContextPasser

All Implemented Interfaces:

ImplicitContextPasser, BeanNameAware, InitializingBean

public class SecureUsernamePasswordAuthenticationServiceContextPasser
extends AuthenticationServiceContextPasser

This ContextPasser en/decrypts credentials using an AES-128 cipher such that no plain text passwords are sent over the network.

Author:

Stefan Wismer (SWI)

File-location:

SecureUsernamePasswordAuthenticationServiceContextPasser

Last check-in date:

2010-01-15 12:21:07 +0100 (Fr, 15. Jan 2010) by jonasha for revision 4091

Constructor Summary

SecureUsernamePasswordAuthenticationServiceContextPasser()

Method Summary

Object	getImplicitlyPassedContext() This method is called by the client that makes a remote invocation to collect the implicitly passed context and add it to the request.
void	pushImplicitlyPassedContext(Object context) This method is called by the server that receives a remote invocation to push the context to the service.
void	setKey(String key)

Methods inherited from class ch.elca.el4j.core.contextpassing.AbstractImplicitContextPasser

afterPropertiesSet, getBeanName, setBeanName, setImplicitContextPassingRegistry

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureUsernamePasswordAuthenticationServiceContextPasser

public SecureUsernamePasswordAuthenticationServiceContextPasser()

Method Detail

setKey

public void setKey(String key)

Parameters:

key - Is the key to set.

getImplicitlyPassedContext

public Object getImplicitlyPassedContext()

This method is called by the client that makes a remote invocation to collect the implicitly passed context and add it to the request. The authentication data is fetched from the SecurityContextHolder.

Specified by:

getImplicitlyPassedContext in interface ImplicitContextPasser

Overrides:

getImplicitlyPassedContext in class AuthenticationServiceContextPasser

Returns:

The authentication data for the currently logged in user

See Also:

AbstractImplicitContextPasser

pushImplicitlyPassedContext

public void pushImplicitlyPassedContext(Object context)

This method is called by the server that receives a remote invocation to push the context to the service. The authentication data is stored in the SecurityContextHolder.

Specified by:

pushImplicitlyPassedContext in interface ImplicitContextPasser

Overrides:

pushImplicitlyPassedContext in class AuthenticationServiceContextPasser

Parameters:

context - The received implicit context for this passer.

See Also:

AbstractImplicitContextPasser