no.feide.moria.webservices.v2_0
Interface AuthenticationIF

All Superinterfaces:

java.rmi.Remote

public interface AuthenticationIF
extends java.rmi.Remote

Version:

$Revision: 1.8 $

Author:

Bjørn Ola Smievoll <b.o.smievoll@conduct.no>

Method Summary

Attribute[]	directNonInteractiveAuthentication(java.lang.String[] attributes, java.lang.String username, java.lang.String password) Performs direct non-interactive authentication.
Attribute[]	getUserAttributes(java.lang.String serviceTicket) Gets user attributes.
java.lang.String	initiateAuthentication(java.lang.String[] attributes, java.lang.String returnURLPrefix, java.lang.String returnURLPostfix, boolean forceInteractiveAuthentication) Initiates authentication.
boolean	verifyUserExistence(java.lang.String username) Verifies the existence of a given user in the underlying directories.

Method Detail

initiateAuthentication

java.lang.String initiateAuthentication(java.lang.String[] attributes,
                                        java.lang.String returnURLPrefix,
                                        java.lang.String returnURLPostfix,
                                        boolean forceInteractiveAuthentication)
                                        throws java.rmi.RemoteException

Initiates authentication. The initial call done by a service to start a login attempt.

Parameters:

attributes - The attributes the service wants returned on login

returnURLPrefix - The prefix of the url the user is to be returned to

returnURLPostfix - The optional postfix of the return url

forceInteractiveAuthentication - Whether or not cookie based authentication (SSO Light) should be allowed.

Returns:

The Moria url the client is to be redirected to.

Throws:

java.rmi.RemoteException - If anything fails during the call.

directNonInteractiveAuthentication

Attribute[] directNonInteractiveAuthentication(java.lang.String[] attributes,
                                               java.lang.String username,
                                               java.lang.String password)
                                               throws java.rmi.RemoteException

Performs direct non-interactive authentication. A redirect- and html-less login method. Only to be used in special cases where the client for some reason does not support the standard login procedure. Inherently insecure as the service will have knowledge of the plaintext password.

Parameters:

attributes - The attributes the service wants returned on login.

username - The user name of the user to be authenticated.

password - The password of the user to be authenticated.

Returns:

Array of attributes as requested.

Throws:

java.rmi.RemoteException - If anything fails during the call.

getUserAttributes

Attribute[] getUserAttributes(java.lang.String serviceTicket)
                              throws java.rmi.RemoteException

Gets user attributes. Called by the service when the user returns after a successful login.

Parameters:

serviceTicket - The ticket included in the return request issued by the client.

Returns:

Array of attributes as requested in initiateAuthentication.

Throws:

java.rmi.RemoteException - If anything fails during the call.

verifyUserExistence

boolean verifyUserExistence(java.lang.String username)
                            throws java.rmi.RemoteException

Verifies the existence of a given user in the underlying directories.

Parameters:

username - The username to be validated.

Returns:

true if the user is found.

Throws:

java.rmi.RemoteException - If anything fails during the call.