org.acegisecurity
Class AuthenticationTrustResolverImpl

java.lang.Object
org.acegisecurity.AuthenticationTrustResolverImpl
- All Implemented Interfaces:
- AuthenticationTrustResolver
- public class AuthenticationTrustResolverImpl
- extends java.lang.Object
- implements AuthenticationTrustResolver
Basic implementation of AuthenticationTrustResolver.
Makes trust decisions based on whether the passed
Authentication is an instance of a defined class.
If anonymousClass 55 or rememberMeClass 55 is null,
the corresponding method will always return false.
- Version:
- $Id: AuthenticationTrustResolverImpl.java,v 1.4 2005/11/17 00:55:49 benalex Exp $
| Methods inherited from class java.lang.Object |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
anonymousClass
private java.lang.Class anonymousClass
rememberMeClass
private java.lang.Class rememberMeClass
AuthenticationTrustResolverImpl
public AuthenticationTrustResolverImpl()
isAnonymous
public boolean isAnonymous(Authentication authentication)
- Description copied from interface:
AuthenticationTrustResolver
- Indicates whether the passed
Authentication token
represents an anonymous user. Typically the framework will call this
method if it is trying to decide whether an
AccessDeniedException should result in a final rejection
(ie as would be the case if the principal was non-anonymous/fully
authenticated) or direct the principal to attempt actual authentication
(ie as would be the case if the Authentication was merely
anonymous).
- Specified by:
isAnonymous in interface AuthenticationTrustResolver
setAnonymousClass
public void setAnonymousClass(java.lang.Class anonymousClass)
getAnonymousClass
public java.lang.Class getAnonymousClass()
isRememberMe
public boolean isRememberMe(Authentication authentication)
- Description copied from interface:
AuthenticationTrustResolver
- Indicates whether the passed
Authentication token
represents user that has been remembered (ie not a user that has been
fully authenticated).
No part of the framework uses this method, as it is a weak
definition of trust levels. The method is provided simply to assist
with custom AccessDecisionVoters and the like that you
might develop. Of course, you don't need to use this method either and
can develop your own "trust level" hierarchy instead.
- Specified by:
isRememberMe in interface AuthenticationTrustResolver
setRememberMeClass
public void setRememberMeClass(java.lang.Class rememberMeClass)
getRememberMeClass
public java.lang.Class getRememberMeClass()