Interface AuthenticationProvider

All Superinterfaces:

AutoCloseable, Extension

All Known Implementing Classes:

EcmwfTotpAuthenticationProvider

public interface AuthenticationProvider
extends Extension

Credential validation for Master WebUsers and transfer-protocol users, not authorization. Implementations must support concurrent calls, bound network waits and never log credentials.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final record	AuthenticationProvider.Authentication
static enum	AuthenticationProvider.Result

Field Summary

Fields inherited from interface Extension

API_VERSION

Method Summary

Modifier and Type	Method	Description
AuthenticationProvider.Result	authenticate(String user, String credentials, String origin)	Validate the requested user without remapping its identity.
default AuthenticationProvider.Authentication	authenticateIdentity(String user, String credentials, String origin)	Optionally return fresh directory data with a successful credential check, without a second authentication.

Methods inherited from interface Extension

apiVersion, close, start

Method Details

authenticate

AuthenticationProvider.Result authenticate(String user,
 String credentials,
 String origin)
                                    throws IOException

Validate the requested user without remapping its identity. An outage must throw IOException. Neither rejection nor an unsupported request permits fallback to another credential store.

Throws:

IOException

authenticateIdentity

default AuthenticationProvider.Authentication authenticateIdentity(String user,
 String credentials,
 String origin)
                                                            throws IOException

Optionally return fresh directory data with a successful credential check, without a second authentication. The core validates the identity and persists updates; this does not grant WebUser access.

Throws:

IOException