Package | Description |
---|---|
org.apache.shiro.authc |
Core interfaces and exceptions concerning Authentication (the act of logging-in).
|
org.apache.shiro.authz |
Core interfaces and exceptions supporting Authorization (access control).
|
org.apache.shiro.cas | |
org.apache.shiro.realm |
Components and sub-packages used in supporting the core
Realm interface. |
org.apache.shiro.realm.activedirectory |
Realms that acquire security data from a Microsoft Active Directory.
|
org.apache.shiro.realm.jdbc |
Realms that acquire security data from an RDBMS (Relational Database Management System) using the
JDBC API.
|
org.apache.shiro.realm.ldap |
Realms that acquire security data from an LDAP (Lightweight Directory Access Protocol) server
utilizing LDAP/Naming APIs.
|
Modifier and Type | Interface and Description |
---|---|
interface |
Account
An Account is a convenience interface that extends both
AuthenticationInfo and
AuthorizationInfo and represents authentication and authorization for a single account in a
single Realm. |
Modifier and Type | Class and Description |
---|---|
class |
SimpleAccount
Simple implementation of the
Account interface that
contains principal and credential and authorization information (roles and permissions) as instance variables and
exposes them via getters and setters using standard JavaBean notation. |
Modifier and Type | Class and Description |
---|---|
class |
SimpleAuthorizationInfo
Simple POJO implementation of the
AuthorizationInfo interface that stores roles and permissions as internal
attributes. |
Modifier and Type | Method and Description |
---|---|
protected AuthorizationInfo |
CasRealm.doGetAuthorizationInfo(PrincipalCollection principals)
Deprecated.
Retrieves the AuthorizationInfo for the given principals (the CAS previously authenticated user : id + attributes).
|
Modifier and Type | Method and Description |
---|---|
protected AuthorizationInfo |
SimpleAccountRealm.doGetAuthorizationInfo(PrincipalCollection principals) |
protected abstract AuthorizationInfo |
AuthorizingRealm.doGetAuthorizationInfo(PrincipalCollection principals)
Retrieves the AuthorizationInfo for the given principals from the underlying data store.
|
protected AuthorizationInfo |
AuthorizingRealm.getAuthorizationInfo(PrincipalCollection principals)
Returns an account's authorization-specific information for the specified
principals ,
or null if no account could be found. |
Modifier and Type | Method and Description |
---|---|
Cache<Object,AuthorizationInfo> |
AuthorizingRealm.getAuthorizationCache() |
Modifier and Type | Method and Description |
---|---|
protected void |
AuthorizingRealm.checkPermission(Permission permission,
AuthorizationInfo info) |
protected void |
AuthorizingRealm.checkPermissions(Collection<Permission> permissions,
AuthorizationInfo info) |
protected void |
AuthorizingRealm.checkRole(String role,
AuthorizationInfo info) |
protected void |
AuthorizingRealm.checkRoles(Collection<String> roles,
AuthorizationInfo info) |
protected Collection<Permission> |
AuthorizingRealm.getPermissions(AuthorizationInfo info) |
protected boolean |
AuthorizingRealm.hasRole(String roleIdentifier,
AuthorizationInfo info) |
protected boolean[] |
AuthorizingRealm.hasRoles(List<String> roleIdentifiers,
AuthorizationInfo info) |
protected boolean[] |
AuthorizingRealm.isPermitted(List<Permission> permissions,
AuthorizationInfo info) |
protected boolean |
AuthorizingRealm.isPermitted(Permission permission,
AuthorizationInfo info) |
protected boolean |
AuthorizingRealm.isPermittedAll(Collection<Permission> permissions,
AuthorizationInfo info) |
Modifier and Type | Method and Description |
---|---|
void |
AuthorizingRealm.setAuthorizationCache(Cache<Object,AuthorizationInfo> authorizationCache) |
Modifier and Type | Method and Description |
---|---|
protected AuthorizationInfo |
ActiveDirectoryRealm.buildAuthorizationInfo(Set<String> roleNames) |
protected AuthorizationInfo |
ActiveDirectoryRealm.queryForAuthorizationInfo(PrincipalCollection principals,
LdapContextFactory ldapContextFactory)
Builds an
AuthorizationInfo object by querying the active directory LDAP context for the
groups that a user is a member of. |
Modifier and Type | Method and Description |
---|---|
protected AuthorizationInfo |
JdbcRealm.doGetAuthorizationInfo(PrincipalCollection principals)
This implementation of the interface expects the principals collection to return a String username keyed off of
this realm's
name |
Modifier and Type | Method and Description |
---|---|
protected AuthorizationInfo |
DefaultLdapRealm.doGetAuthorizationInfo(PrincipalCollection principals) |
protected AuthorizationInfo |
AbstractLdapRealm.doGetAuthorizationInfo(PrincipalCollection principals) |
protected AuthorizationInfo |
DefaultLdapRealm.queryForAuthorizationInfo(PrincipalCollection principals,
LdapContextFactory ldapContextFactory)
Method that should be implemented by subclasses to build an
AuthorizationInfo object by querying the LDAP context for the
specified principal. |
protected abstract AuthorizationInfo |
AbstractLdapRealm.queryForAuthorizationInfo(PrincipalCollection principal,
LdapContextFactory ldapContextFactory)
Abstract method that should be implemented by subclasses to builds an
AuthorizationInfo object by querying the LDAP context for the
specified principal. |
Copyright © 2004–2016 The Apache Software Foundation. All rights reserved.