Authentication (jbpm-3.0.4) - JBoss JBPM 3.0.4 API 英文版文档

Overview

Package

Class

Tree

Deprecated

Index

Help

PREV CLASS NEXT CLASS

FRAMES NO FRAMES

SUMMARY: NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

org.jbpm.security
Class Authentication

java.lang.Object
  org.jbpm.security.Authentication

public abstract class Authentication
extends java.lang.Object

provides central access point to the configurable authentication.

Authentication (knowing which user is running this code) is outside the scope of jBPM. It is assumed that the environment in which jBPM executes has already performed authentication and hence knows who is running the code.

The implementations that can be plugged into this by configuring an Authenticator implementation in the jbpm.properties. To configure another authenticator then the default one, specify the fully qualified class name in the property 'jbpm.authenticator'.

The default is JbpmDefaultAuthenticator. That authenticator assumes that the user calls pushAuthenticatedActorId(String) and popAuthenticatedActorId() in a try-finally block around the the jbpm API invocations. For web applications, there is a filter (JbpmAuthenticationFilter)that calls these methods based on the httpServletRequest.getUserPrincipal().getName();

Other authentication implementation include :

JBossAuthenticator that looks up the currently authenticated user from the JBoss SecurityAssociation.
SubjectAuthenticator that looks up the currently authenticated user from the current subject with Subject.getSubject(...).

Field Summary

protected static Authenticator authenticator


Constructor Summary

Authentication()


Method Summary

static java.lang.String getAuthenticatedActorId()
          central method to look up the currently authenticated swimlaneActorId.

static void popAuthenticatedActorId()
          conventience method for ending the authenticated section for the jbpm default authentication mechanism.

static void pushAuthenticatedActorId(java.lang.String actorId)
          conventience method for setting the authenticated swimlaneActorId for the jbpm default authentication mechanism.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

authenticator

protected static Authenticator authenticator

Constructor Detail

Authentication

public Authentication()

Method Detail

getAuthenticatedActorId

public static java.lang.String getAuthenticatedActorId()

central method to look up the currently authenticated swimlaneActorId. (currently means relative to the current thread). This method delegates the current swimlaneActorId lookup to a configurable Authenticator.

pushAuthenticatedActorId

public static void pushAuthenticatedActorId(java.lang.String actorId)

conventience method for setting the authenticated swimlaneActorId for the jbpm default authentication mechanism. Always use this method in a try-finally block with popAuthenticatedActorId() in the finally block.

See Also:: JbpmDefaultAuthenticator

popAuthenticatedActorId

public static void popAuthenticatedActorId()

conventience method for ending the authenticated section for the jbpm default authentication mechanism. Always use this method in a finally block with pushAuthenticatedActorId(String) in the try block.

See Also:: JbpmDefaultAuthenticator