[jbossws-commits] JBossWS SVN: r14390 - in spi/trunk/src/main/java/org/jboss/wsf/spi: invocation and 1 other directories.

[jbossws-commits at lists.jboss.org]

Author: alessio.soldano at jboss.com
Date: 2011-05-18 04:41:29 -0400 (Wed, 18 May 2011)
New Revision: 14390

Added:
   spi/trunk/src/main/java/org/jboss/wsf/spi/security/SecurityDomainContext.java
Modified:
   spi/trunk/src/main/java/org/jboss/wsf/spi/deployment/Endpoint.java
   spi/trunk/src/main/java/org/jboss/wsf/spi/invocation/SecurityAdaptor.java
Log:
[JBWS-3296] Providing SecurityDomainContext interface to abstract picketbox/jboss-security AuthenticationManager stuff


Modified: spi/trunk/src/main/java/org/jboss/wsf/spi/deployment/Endpoint.java
===================================================================
--- spi/trunk/src/main/java/org/jboss/wsf/spi/deployment/Endpoint.java	2011-05-18 08:39:13 UTC (rev 14389)
+++ spi/trunk/src/main/java/org/jboss/wsf/spi/deployment/Endpoint.java	2011-05-18 08:41:29 UTC (rev 14390)
@@ -31,6 +31,7 @@
 import org.jboss.wsf.spi.invocation.InvocationHandler;
 import org.jboss.wsf.spi.invocation.RequestHandler;
 import org.jboss.wsf.spi.management.EndpointMetrics;
+import org.jboss.wsf.spi.security.SecurityDomainContext;
 
 /**
  * A general JAXWS endpoint.
@@ -140,4 +141,10 @@
 
    /** Set endpoint address */
    void setAddress(String address);
+   
+   /** Get security domain context */
+   SecurityDomainContext getSecurityDomainContext();
+   
+   /** Set security domain context */
+   void setSecurityDomainContext(SecurityDomainContext context);
 }

Modified: spi/trunk/src/main/java/org/jboss/wsf/spi/invocation/SecurityAdaptor.java
===================================================================
--- spi/trunk/src/main/java/org/jboss/wsf/spi/invocation/SecurityAdaptor.java	2011-05-18 08:39:13 UTC (rev 14389)
+++ spi/trunk/src/main/java/org/jboss/wsf/spi/invocation/SecurityAdaptor.java	2011-05-18 08:41:29 UTC (rev 14390)
@@ -23,8 +23,6 @@
 
 import java.security.Principal;
 
-import javax.security.auth.Subject;
-
 /**
  * A container independent security adaptor
  *
@@ -38,6 +36,4 @@
    
    Object getCredential();
    void setCredential(Object credential);
-   
-   void pushSubjectContext(Subject subject, Principal principal, Object credential);
 }

Added: spi/trunk/src/main/java/org/jboss/wsf/spi/security/SecurityDomainContext.java
===================================================================
--- spi/trunk/src/main/java/org/jboss/wsf/spi/security/SecurityDomainContext.java	                        (rev 0)
+++ spi/trunk/src/main/java/org/jboss/wsf/spi/security/SecurityDomainContext.java	2011-05-18 08:41:29 UTC (rev 14390)
@@ -0,0 +1,89 @@
+/*
+ * JBoss, Home of Professional Open Source.
+ * Copyright 2011, Red Hat Middleware LLC, and individual contributors
+ * as indicated by the @author tags. See the copyright.txt file in the
+ * distribution for a full listing of individual contributors.
+ *
+ * This is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This software is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this software; if not, write to the Free
+ * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+ */
+package org.jboss.wsf.spi.security;
+
+import java.security.Principal;
+import java.util.Set;
+
+import javax.security.auth.Subject;
+
+/**
+ * A container independent security domain related facility
+ *
+ * @author alessio.soldano at jboss.com
+ * @since 13-May-2011
+ */
+public interface SecurityDomainContext
+{
+   public String getSecurityDomain();
+   
+   // Authentication methods
+   
+   /**
+    * The isValid method is invoked to see if a user identity and associated
+    * credentials as known in the operational environment are valid proof of the
+    * user identity.
+    * 
+    * @param principal - the user identity in the operation environment 
+    * @param credential - the proof of user identity as known in the
+    * operation environment
+    * @param activeSubject - the Subject which should be populated with the
+    * validated Subject contents. A JAAS based implementation would typically
+    * populate the activeSubject with the LoginContext.login result.
+    * @return true if the principal, credential pair is valid, false otherwise.
+    * 
+    */
+   public boolean isValid(Principal principal, Object credential, Subject activeSubject);
+   
+   
+   // Authorization methods
+   
+   /**
+    * Validates the application domain roles to which the operational
+    * environment Principal belongs.
+    * 
+    * @param principal the caller principal as known in the operation environment.
+    * @param roles The Set<Principal> for the application domain roles that the
+    * principal is to be validated against.
+    * @return true if the principal has at least one of the roles in the roles set,
+    *        false otherwise.
+    */
+   public boolean doesUserHaveRole(Principal principal, Set<Principal> roles);
+   
+   
+   /**
+    * Return the set of domain roles the principal has been assigned.
+    * 
+    * @return The Set<Principal> for the application domain roles that the principal has been assigned.
+    */
+   public Set<Principal> getUserRoles(Principal principal);
+   
+   /**
+    * Push the provided subject into the current security context; if that's not set yet,
+    * also creates a new security context and associates it with the current thread.
+    * 
+    * @param subject
+    * @param principal
+    * @param credential
+    */
+   public void pushSubjectContext(final Subject subject, final Principal principal, final Object credential);
+}