Package org.apache.hc.client5.http.impl.auth

Class GGSSchemeBase

java.lang.Object

org.apache.hc.client5.http.impl.auth.GGSSchemeBase

All Implemented Interfaces:

AuthScheme

Direct Known Subclasses:

KerberosScheme, SPNegoScheme

public abstract class GGSSchemeBase
extends Object
implements AuthScheme

Common behavior for GSS based authentication schemes.

Since:

4.2

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
(package private) static enum	GGSSchemeBase.State

Field Summary

Fields

Modifier and Type	Field	Description
private String	challenge
private final KerberosConfig	config
private final DnsResolver	dnsResolver
private GSSCredential	gssCredential
private static final String	KERBEROS_SCHEME
private static final org.slf4j.Logger	LOG
private static final String	NO_TOKEN
private GGSSchemeBase.State	state	Authentication process state
private byte[]	token

Constructor Summary

Constructors

Constructor	Description
GGSSchemeBase()
GGSSchemeBase(KerberosConfig config)
GGSSchemeBase(KerberosConfig config, DnsResolver dnsResolver)

Method Summary

Modifier and Type	Method	Description
protected GSSContext	createGSSContext(GSSManager manager, Oid oid, GSSName serverName, GSSCredential gssCredential)
String	generateAuthResponse(org.apache.hc.core5.http.HttpHost host, org.apache.hc.core5.http.HttpRequest request, org.apache.hc.core5.http.protocol.HttpContext context)	Generates an authorization response based on the current state.
protected byte[]	generateGSSToken(byte[] input, Oid oid, String serviceName, String authServer)
protected abstract byte[]	generateToken(byte[] input, String serviceName, String authServer)
protected GSSManager	getManager()
Principal	getPrincipal()	Returns Principal whose credentials are used to generate an authentication response.
String	getRealm()	Returns authentication realm.
boolean	isChallengeComplete()	Authentication process may involve a series of challenge-response exchanges.
boolean	isResponseReady(org.apache.hc.core5.http.HttpHost host, CredentialsProvider credentialsProvider, org.apache.hc.core5.http.protocol.HttpContext context)	Determines whether or not an authorization response can be generated based on the actual authentication state.
void	processChallenge(AuthChallenge authChallenge, org.apache.hc.core5.http.protocol.HttpContext context)	Processes the given auth challenge.
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.hc.client5.http.auth.AuthScheme

getName, isConnectionBased

Field Details

LOG

private static final org.slf4j.Logger LOG

NO_TOKEN

private static final String NO_TOKEN

See Also:

• Constant Field Values

KERBEROS_SCHEME

private static final String KERBEROS_SCHEME

See Also:

• Constant Field Values

config

private final KerberosConfig config

dnsResolver

private final DnsResolver dnsResolver

state

private GGSSchemeBase.State state

Authentication process state

gssCredential

private GSSCredential gssCredential

challenge

private String challenge

token

private byte[] token

Constructor Details

GGSSchemeBase

GGSSchemeBase(KerberosConfig config,
 DnsResolver dnsResolver)

GGSSchemeBase

GGSSchemeBase(KerberosConfig config)

GGSSchemeBase

GGSSchemeBase()

Method Details

getRealm

public String getRealm()

Description copied from interface: AuthScheme

Returns authentication realm. If the concept of an authentication realm is not applicable to the given authentication scheme, returns null.

Specified by:

getRealm in interface AuthScheme

Returns:

the authentication realm

processChallenge

public void processChallenge(AuthChallenge authChallenge,
 org.apache.hc.core5.http.protocol.HttpContext context)
                      throws MalformedChallengeException

Description copied from interface: AuthScheme

Processes the given auth challenge. Some authentication schemes may involve multiple challenge-response exchanges. Such schemes must be able to maintain internal state when dealing with sequential challenges

Specified by:

processChallenge in interface AuthScheme

Parameters:

authChallenge - the auth challenge

context - HTTP context

Throws:

MalformedChallengeException - in case the auth challenge is incomplete, malformed or otherwise invalid.

getManager

protected GSSManager getManager()

generateGSSToken

protected byte[] generateGSSToken(byte[] input,
 Oid oid,
 String serviceName,
 String authServer)
                           throws GSSException

Throws:

GSSException

Since:

4.4

createGSSContext

protected GSSContext createGSSContext(GSSManager manager,
 Oid oid,
 GSSName serverName,
 GSSCredential gssCredential)
                               throws GSSException

Throws:

GSSException

Since:

5.0

generateToken

protected abstract byte[] generateToken(byte[] input,
 String serviceName,
 String authServer)
                                 throws GSSException

Throws:

GSSException

Since:

4.4

isChallengeComplete

public boolean isChallengeComplete()

Description copied from interface: AuthScheme

Authentication process may involve a series of challenge-response exchanges. This method tests if the authorization process has been fully completed (either successfully or unsuccessfully), that is, all the required authorization challenges have been processed in their entirety.

Specified by:

isChallengeComplete in interface AuthScheme

Returns:

true if the authentication process has been completed, false otherwise.

isResponseReady

public boolean isResponseReady(org.apache.hc.core5.http.HttpHost host,
 CredentialsProvider credentialsProvider,
 org.apache.hc.core5.http.protocol.HttpContext context)
                        throws AuthenticationException

Description copied from interface: AuthScheme

Determines whether or not an authorization response can be generated based on the actual authentication state. Generally the outcome of this method will depend upon availability of user credentials necessary to produce an authorization response.

Specified by:

isResponseReady in interface AuthScheme

credentialsProvider - The credentials to be used for authentication

context - HTTP context

Returns:

true if an authorization response can be generated and the authentication handshake can proceed, false otherwise.

Throws:

AuthenticationException - if authorization string cannot be generated due to an authentication failure

getPrincipal

public Principal getPrincipal()

Description copied from interface: AuthScheme

Returns Principal whose credentials are used to generate an authentication response. Connection based schemes are required to return a user Principal if authorization applies to for the entire life span of connection.

Specified by:

getPrincipal in interface AuthScheme

Returns:

user principal

See Also:

• AuthScheme.isConnectionBased()

generateAuthResponse

public String generateAuthResponse(org.apache.hc.core5.http.HttpHost host,
 org.apache.hc.core5.http.HttpRequest request,
 org.apache.hc.core5.http.protocol.HttpContext context)
                            throws AuthenticationException

Description copied from interface: AuthScheme

Generates an authorization response based on the current state. Some authentication schemes may need to load user credentials required to generate an authorization response from a CredentialsProvider prior to this method call.

Specified by:

generateAuthResponse in interface AuthScheme

request - The request being authenticated

context - HTTP context

Returns:

authorization header

Throws:

AuthenticationException - if authorization string cannot be generated due to an authentication failure

See Also:

• AuthScheme.isResponseReady(HttpHost, CredentialsProvider, HttpContext)

toString

public String toString()

Overrides:

toString in class Object