org.cyclos.security.access

Class LoginServiceSecurity

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.access.LoginServiceSecurity

All Implemented Interfaces:

LoginService, Service

@Security
public class LoginServiceSecurity
extends BaseServiceSecurity
implements LoginService

Security layer for LoginService

Author:

luis

Constructor Summary

Constructors

Constructor and Description
LoginServiceSecurity()

Method Summary

Modifier and Type	Method and Description
void	checkSecondaryPassword(java.lang.String password) Validate the secondary password for the logged user
LoginData	getLoginData(java.lang.String channelName) Returns the data for user login according to the given channel name and based in the current session configuration
PasswordInputDTO	getSecondaryPasswordInput() Returns the input for the secondary password for the logged user.
UserLoginResult	login(TimeIntervalDTO sessionTimeout) Creates a session for the currently authenticated user and optionally sets a timeout for it.
InitializationData	loginAndGetInitializationData(TimeIntervalDTO sessionTimeout) Same as LoginService.login(TimeIntervalDTO) but returning the InitializationData.
UserLoginDetailedResult	loginUser(UserLoginDTO params) Creates a session for a user, indicating a remote address (from the client connection) a channel and optionally a timeout. Must be called by administrators with permissions to login other users, and is used when there is a system which relays logins to Cyclos.
void	logout() Invalidates the current user session, if the current request was authenticated with a session
boolean	logoutUser(java.lang.String token) Removes the session with the given token, returning whether the sessions was actually removed
java.lang.String	replaceSession() Replaces the current session token with another one.
protected org.cyclos.impl.access.EntityCheck<?>	resolveEntityCheck() Must be implemented in order to return the EntityCheck managed by this security component, or null if none

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isMemberOnly, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, mailContentBuilder, message, message, persist, processBatch, refresh, remove, selectFrom, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LoginServiceSecurity

public LoginServiceSecurity()

Method Detail

checkSecondaryPassword

public void checkSecondaryPassword(java.lang.String password)

Description copied from interface: LoginService

Validate the secondary password for the logged user

Specified by:

checkSecondaryPassword in interface LoginService

getLoginData

public LoginData getLoginData(java.lang.String channelName)

Description copied from interface: LoginService

Returns the data for user login according to the given channel name and based in the current session configuration

Specified by:

getLoginData in interface LoginService

getSecondaryPasswordInput

public PasswordInputDTO getSecondaryPasswordInput()

Description copied from interface: LoginService

Returns the input for the secondary password for the logged user.

Specified by:

getSecondaryPasswordInput in interface LoginService

login

public UserLoginResult login(TimeIntervalDTO sessionTimeout)
                      throws FrameworkException,
                             LoginException,
                             RemoteAddressBlockedException

Description copied from interface: LoginService

Creates a session for the currently authenticated user and optionally sets a timeout for it.

Specified by:

login in interface LoginService

Throws:

FrameworkException

LoginException

RemoteAddressBlockedException

loginAndGetInitializationData

public InitializationData loginAndGetInitializationData(TimeIntervalDTO sessionTimeout)
                                                 throws FrameworkException

Description copied from interface: LoginService

Same as LoginService.login(TimeIntervalDTO) but returning the InitializationData.

Specified by:

loginAndGetInitializationData in interface LoginService

Throws:

FrameworkException

loginUser

public UserLoginDetailedResult loginUser(UserLoginDTO params)
                                  throws FrameworkException,
                                         LoginException,
                                         RemoteAddressBlockedException

Description copied from interface: LoginService

Creates a session for a user, indicating a remote address (from the client connection) a channel and optionally a timeout.
Must be called by administrators with permissions to login other users, and is used when there is a system which relays logins to Cyclos.

Specified by:

loginUser in interface LoginService

Throws:

FrameworkException

LoginException

RemoteAddressBlockedException

logout

public void logout()
            throws FrameworkException

Description copied from interface: LoginService

Invalidates the current user session, if the current request was authenticated with a session

Specified by:

logout in interface LoginService

Throws:

FrameworkException

logoutUser

public boolean logoutUser(java.lang.String token)
                   throws FrameworkException

Description copied from interface: LoginService

Removes the session with the given token, returning whether the sessions was actually removed

Specified by:

logoutUser in interface LoginService

Throws:

FrameworkException

replaceSession

public java.lang.String replaceSession()
                                throws FrameworkException

Description copied from interface: LoginService

Replaces the current session token with another one. Only works if the current authentication is done via a session. The current session will have a new token generated, and that token is returned. If not connected as a session, will return null.

Specified by:

replaceSession in interface LoginService

Throws:

FrameworkException

resolveEntityCheck

protected org.cyclos.impl.access.EntityCheck<?> resolveEntityCheck()

Description copied from class: BaseServiceSecurity

Must be implemented in order to return the EntityCheck managed by this security component, or null if none

Specified by:

resolveEntityCheck in class BaseServiceSecurity