Package org.openremote.manager.security

Class ManagerBasicIdentityProvider

java.lang.Object

org.openremote.container.security.basic.BasicIdentityProvider

org.openremote.manager.security.ManagerBasicIdentityProvider

All Implemented Interfaces:

org.openremote.container.security.IdentityProvider, ManagerIdentityProvider

public class ManagerBasicIdentityProvider
extends org.openremote.container.security.basic.BasicIdentityProvider
implements ManagerIdentityProvider

Nested Class Summary

Nested classes/interfaces inherited from class org.openremote.container.security.basic.BasicIdentityProvider

org.openremote.container.security.basic.BasicIdentityProvider.BasicFixAuthenticationMechanism

Field Summary

Fields

Modifier and Type	Field	Description
protected String	adminPassword
protected ManagerIdentityService	identityService

Fields inherited from class org.openremote.container.security.basic.BasicIdentityProvider

persistenceService

Fields inherited from interface org.openremote.container.security.IdentityProvider

OR_ADMIN_PASSWORD, OR_ADMIN_PASSWORD_DEFAULT

Constructor Summary

Constructors

Constructor	Description
ManagerBasicIdentityProvider()

Method Summary

Modifier and Type	Method	Description
boolean	canSubscribeWith(org.openremote.container.security.AuthContext auth, org.openremote.model.event.shared.RealmFilter<?> filter, org.openremote.model.security.ClientRole... requiredRoles)	Superusers can subscribe to all events, regular users must be in the same realm as the filter and any required roles must match.
org.openremote.model.security.Realm	createRealm(org.openremote.model.security.Realm realm)
org.openremote.model.security.User	createUpdateUser(String realm, org.openremote.model.security.User user, String password, boolean allowUpdate)
void	deleteRealm(String realm)
void	deleteUser(String realm, String userId)
org.openremote.model.security.Role[]	getClientRoles(String realm, String client)
protected Set<String>	getDefaultRoles()
String	getFrontendURI()	Returns the frontend URL to be used for frontend apps to authenticate
org.openremote.model.security.Realm	getRealm(String realm)
org.openremote.model.security.Realm[]	getRealms()
org.openremote.model.security.User	getUser(String userId)
org.openremote.model.security.User	getUserByUsername(String realm, String username)
String[]	getUserClientRoles(String realm, String userId, String client)
String[]	getUserRealmRoles(String realm, String userId)
void	init(org.openremote.model.Container container)
boolean	isMasterRealmAdmin(String userId)
boolean	isRealmActiveAndAccessible(org.openremote.container.security.AuthContext authContext, String realm)
boolean	isRealmActiveAndAccessible(org.openremote.container.security.AuthContext authContext, org.openremote.model.security.Realm realm)
boolean	isRestrictedUser(org.openremote.container.security.AuthContext authContext)
boolean	isUserInRealm(String userId, String realm)
org.openremote.model.security.User[]	queryUsers(org.openremote.model.query.UserQuery userQuery)
boolean	realmExists(String realm)
void	resetPassword(String realm, String userId, org.openremote.model.security.Credential credential)
String	resetSecret(String realm, String userId, String secret)
void	start(org.openremote.model.Container container)
String	toString()
void	updateClientRoles(String realm, String client, org.openremote.model.security.Role[] roles)
void	updateRealm(org.openremote.model.security.Realm realm)
void	updateUserClientRoles(String realm, String userId, String client, String... roles)
void	updateUserRealmRoles(String realm, String userId, String... roles)

Methods inherited from class org.openremote.container.security.basic.BasicIdentityProvider

secureDeployment, stop, verifyAccount

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.openremote.container.security.IdentityProvider

secureDeployment, stop

Methods inherited from interface org.openremote.manager.security.ManagerIdentityProvider

addUserRealmRoles

Field Details

identityService

protected ManagerIdentityService identityService

adminPassword

protected String adminPassword

Constructor Details

ManagerBasicIdentityProvider

public ManagerBasicIdentityProvider()

Method Details

init

public void init(org.openremote.model.Container container)

Specified by:

init in interface org.openremote.container.security.IdentityProvider

Overrides:

init in class org.openremote.container.security.basic.BasicIdentityProvider

start

public void start(org.openremote.model.Container container)

Specified by:

start in interface org.openremote.container.security.IdentityProvider

Overrides:

start in class org.openremote.container.security.basic.BasicIdentityProvider

getDefaultRoles

protected Set<String> getDefaultRoles()

Specified by:

getDefaultRoles in class org.openremote.container.security.basic.BasicIdentityProvider

queryUsers

public org.openremote.model.security.User[] queryUsers(org.openremote.model.query.UserQuery userQuery)

Specified by:

queryUsers in interface ManagerIdentityProvider

getUser

public org.openremote.model.security.User getUser(String userId)

Specified by:

getUser in interface ManagerIdentityProvider

getUserByUsername

public org.openremote.model.security.User getUserByUsername(String realm,
 String username)

Specified by:

getUserByUsername in interface ManagerIdentityProvider

createUpdateUser

public org.openremote.model.security.User createUpdateUser(String realm,
 org.openremote.model.security.User user,
 String password,
 boolean allowUpdate)

Specified by:

createUpdateUser in interface ManagerIdentityProvider

deleteUser

public void deleteUser(String realm,
 String userId)

Specified by:

deleteUser in interface ManagerIdentityProvider

resetPassword

public void resetPassword(String realm,
 String userId,
 org.openremote.model.security.Credential credential)

Specified by:

resetPassword in interface ManagerIdentityProvider

resetSecret

public String resetSecret(String realm,
 String userId,
 String secret)

Specified by:

resetSecret in interface ManagerIdentityProvider

getClientRoles

public org.openremote.model.security.Role[] getClientRoles(String realm,
 String client)

Specified by:

getClientRoles in interface ManagerIdentityProvider

updateClientRoles

public void updateClientRoles(String realm,
 String client,
 org.openremote.model.security.Role[] roles)

Specified by:

updateClientRoles in interface ManagerIdentityProvider

getUserClientRoles

public String[] getUserClientRoles(String realm,
 String userId,
 String client)

Specified by:

getUserClientRoles in interface ManagerIdentityProvider

getUserRealmRoles

public String[] getUserRealmRoles(String realm,
 String userId)

Specified by:

getUserRealmRoles in interface ManagerIdentityProvider

updateUserClientRoles

public void updateUserClientRoles(String realm,
 String userId,
 String client,
 String... roles)

Specified by:

updateUserClientRoles in interface ManagerIdentityProvider

updateUserRealmRoles

public void updateUserRealmRoles(String realm,
 String userId,
 String... roles)

Specified by:

updateUserRealmRoles in interface ManagerIdentityProvider

isMasterRealmAdmin

public boolean isMasterRealmAdmin(String userId)

Specified by:

isMasterRealmAdmin in interface ManagerIdentityProvider

isRestrictedUser

public boolean isRestrictedUser(org.openremote.container.security.AuthContext authContext)

Specified by:

isRestrictedUser in interface ManagerIdentityProvider

isUserInRealm

public boolean isUserInRealm(String userId,
 String realm)

Specified by:

isUserInRealm in interface ManagerIdentityProvider

getRealms

public org.openremote.model.security.Realm[] getRealms()

Specified by:

getRealms in interface ManagerIdentityProvider

getRealm

public org.openremote.model.security.Realm getRealm(String realm)

Specified by:

getRealm in interface ManagerIdentityProvider

updateRealm

public void updateRealm(org.openremote.model.security.Realm realm)

Specified by:

updateRealm in interface ManagerIdentityProvider

createRealm

public org.openremote.model.security.Realm createRealm(org.openremote.model.security.Realm realm)

Specified by:

createRealm in interface ManagerIdentityProvider

deleteRealm

public void deleteRealm(String realm)

Specified by:

deleteRealm in interface ManagerIdentityProvider

isRealmActiveAndAccessible

public boolean isRealmActiveAndAccessible(org.openremote.container.security.AuthContext authContext,
 org.openremote.model.security.Realm realm)

Specified by:

isRealmActiveAndAccessible in interface ManagerIdentityProvider

isRealmActiveAndAccessible

public boolean isRealmActiveAndAccessible(org.openremote.container.security.AuthContext authContext,
 String realm)

Specified by:

isRealmActiveAndAccessible in interface ManagerIdentityProvider

realmExists

public boolean realmExists(String realm)

Specified by:

realmExists in interface ManagerIdentityProvider

canSubscribeWith

public boolean canSubscribeWith(org.openremote.container.security.AuthContext auth,
 org.openremote.model.event.shared.RealmFilter<?> filter,
 org.openremote.model.security.ClientRole... requiredRoles)

Description copied from interface: ManagerIdentityProvider

Superusers can subscribe to all events, regular users must be in the same realm as the filter and any required roles must match. If the authenticated party is a restricted user, this returns false.

Specified by:

canSubscribeWith in interface ManagerIdentityProvider

Returns:

true if the authenticated party can subscribe to events with the given filter.

getFrontendURI

public String getFrontendURI()

Description copied from interface: ManagerIdentityProvider

Returns the frontend URL to be used for frontend apps to authenticate

Specified by:

getFrontendURI in interface ManagerIdentityProvider

toString

public String toString()

Overrides:

toString in class Object