CasAuthoritiesPopulator

Overview

Package

Class

Use

Deprecated

Index

Home >> All >> org >> acegisecurity >> providers >> [ cas overview ]

PREV CLASS NEXT CLASS

SUMMARY:

JAVADOC |

Sourc code of org.acegisecurity.providers.cas.CasAuthoritiesPopulator

SOURCE |

Download org.acegisecurity.providers.cas.CasAuthoritiesPopulator

DOWNLOAD | NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

org.acegisecurity.providers.cas
Interface CasAuthoritiesPopulator

public interface CasAuthoritiesPopulator

Populates the UserDetails associated with a CAS authenticated user.

CAS does not provide the authorities (roles) granted to a user. It merely authenticates their identity. As the Acegi Security System for Spring needs to know the authorities granted to a user in order to construct a valid Authentication object, implementations of this interface will provide this information.

A org.acegisecurity.userdetails.UserDetails is returned by implementations. The UserDetails must, at minimum, contain the username and GrantedAuthority[] objects applicable to the CAS-authenticated user. Note that Acegi Security ignores the password and enabled/disabled status of the UserDetails because this is authentication-related and should have been enforced by the CAS server. The UserDetails returned by implementations is stored in the generated CasAuthenticationToken, so additional properties such as email addresses, telephone numbers etc can easily be stored.

Implementations should not perform any caching. They will only be called when a refresh is required.

Version:: $Id: CasAuthoritiesPopulator.java,v 1.4 2005/11/29 13:10:07 benalex Exp $

Method Summary

org.acegisecurity.userdetails.UserDetails getUserDetails(java.lang.String casUserId)
Obtains the granted authorities for the specified user.

Method Detail

getUserDetails

public org.acegisecurity.userdetails.UserDetails getUserDetails(java.lang.String casUserId)
                                                         throws org.acegisecurity.AuthenticationException

Obtains the granted authorities for the specified user.

May throw any AuthenticationException or return null if the authorities are unavailable.