org.adroitlogic.x.management.rest.auth

Class JWTRealm

java.lang.Object

org.apache.shiro.realm.CachingRealm

org.apache.shiro.realm.AuthenticatingRealm

org.apache.shiro.realm.AuthorizingRealm

org.adroitlogic.x.management.rest.auth.JWTRealm

All Implemented Interfaces:

org.apache.shiro.authc.LogoutAware, org.apache.shiro.authz.Authorizer, org.apache.shiro.authz.permission.PermissionResolverAware, org.apache.shiro.authz.permission.RolePermissionResolverAware, org.apache.shiro.cache.CacheManagerAware, org.apache.shiro.realm.Realm, org.apache.shiro.util.Initializable, org.apache.shiro.util.Nameable

public class JWTRealm
extends org.apache.shiro.realm.AuthorizingRealm

JWTRealm used by shiro for authenticating users and authorizing users

Since:

17.01

Author:

Amila Paranawithana

Constructor Summary

Constructors

Constructor and Description
JWTRealm()

Method Summary

Modifier and Type	Method and Description
protected org.apache.shiro.authc.AuthenticationInfo	doGetAuthenticationInfo(org.apache.shiro.authc.AuthenticationToken token) Authenticate the users trying for the first time by comparing the password with the system username-password map and users come with a previously issued token will be forced to authenticate (token is validated previously).
protected org.apache.shiro.authz.AuthorizationInfo	doGetAuthorizationInfo(org.apache.shiro.subject.PrincipalCollection principals) Authorize the user with shiro.Injects the user's allowed permissions extracted from the incoming JWT token to the shiro authorizationInfo
boolean	supports(org.apache.shiro.authc.AuthenticationToken token)

Methods inherited from class org.apache.shiro.realm.AuthorizingRealm

afterCacheManagerSet, checkPermission, checkPermission, checkPermission, checkPermissions, checkPermissions, checkPermissions, checkRole, checkRole, checkRoles, checkRoles, checkRoles, clearCachedAuthorizationInfo, doClearCache, getAuthorizationCache, getAuthorizationCacheKey, getAuthorizationCacheName, getAuthorizationInfo, getPermissionResolver, getPermissions, getRolePermissionResolver, hasAllRoles, hasRole, hasRole, hasRoles, hasRoles, isAuthorizationCachingEnabled, isPermitted, isPermitted, isPermitted, isPermitted, isPermitted, isPermitted, isPermittedAll, isPermittedAll, isPermittedAll, onInit, setAuthorizationCache, setAuthorizationCacheName, setAuthorizationCachingEnabled, setName, setPermissionResolver, setRolePermissionResolver

Methods inherited from class org.apache.shiro.realm.AuthenticatingRealm

assertCredentialsMatch, clearCachedAuthenticationInfo, getAuthenticationCache, getAuthenticationCacheKey, getAuthenticationCacheKey, getAuthenticationCacheName, getAuthenticationInfo, getAuthenticationTokenClass, getCredentialsMatcher, init, isAuthenticationCachingEnabled, isAuthenticationCachingEnabled, setAuthenticationCache, setAuthenticationCacheName, setAuthenticationCachingEnabled, setAuthenticationTokenClass, setCredentialsMatcher

Methods inherited from class org.apache.shiro.realm.CachingRealm

clearCache, getAvailablePrincipal, getCacheManager, getName, isCachingEnabled, onLogout, setCacheManager, setCachingEnabled

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.shiro.util.Initializable

init

Constructor Detail

JWTRealm

public JWTRealm()

Method Detail

supports

public boolean supports(org.apache.shiro.authc.AuthenticationToken token)

Specified by:

supports in interface org.apache.shiro.realm.Realm

Overrides:

supports in class org.apache.shiro.realm.AuthenticatingRealm

doGetAuthorizationInfo

protected org.apache.shiro.authz.AuthorizationInfo doGetAuthorizationInfo(org.apache.shiro.subject.PrincipalCollection principals)

Authorize the user with shiro.Injects the user's allowed permissions extracted from the incoming JWT token to the shiro authorizationInfo

Specified by:

doGetAuthorizationInfo in class org.apache.shiro.realm.AuthorizingRealm

Parameters:

principals - shiro user principles

doGetAuthenticationInfo

protected org.apache.shiro.authc.AuthenticationInfo doGetAuthenticationInfo(org.apache.shiro.authc.AuthenticationToken token)
                                                                     throws org.apache.shiro.authc.AuthenticationException

Authenticate the users trying for the first time by comparing the password with the system username-password map and users come with a previously issued token will be forced to authenticate (token is validated previously).

Specified by:

doGetAuthenticationInfo in class org.apache.shiro.realm.AuthenticatingRealm

Parameters:

token - authentication token generated with user credentials

Throws:

org.apache.shiro.authc.AuthenticationException - if user