Package io.polyglotted.esjwt.realm

Class JwtAuthFailureHandler

java.lang.Object

org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

io.polyglotted.esjwt.realm.JwtAuthFailureHandler

public class JwtAuthFailureHandler
extends org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

A custom implementation of a AuthenticationFailureHandler. The methods in this class must return an ElasticsearchSecurityException with the appropriate status and headers for a client to be able to handle an authentication failure. These methods can be called when there is a missing token, failure to authenticate an extracted token, or when an exception occurs processing a request.

This class extends the DefaultAuthenticationFailureHandler provided by X-Pack and changes the WWW-Authenticate header to return a JWT failure. The default return value is a 401 status with a Basic authentication challenge.

Constructor Summary

Constructors

Constructor	Description
JwtAuthFailureHandler()

Method Summary

Modifier and Type	Method	Description
org.elasticsearch.ElasticsearchSecurityException	authenticationRequired(java.lang.String action, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	exceptionProcessingRequest(org.elasticsearch.rest.RestRequest request, java.lang.Exception e, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	exceptionProcessingRequest(org.elasticsearch.transport.TransportMessage message, java.lang.String action, java.lang.Exception e, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	failedAuthentication(org.elasticsearch.rest.RestRequest request, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	failedAuthentication(org.elasticsearch.transport.TransportMessage message, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, java.lang.String action, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	missingToken(org.elasticsearch.rest.RestRequest request, org.elasticsearch.common.util.concurrent.ThreadContext context)
org.elasticsearch.ElasticsearchSecurityException	missingToken(org.elasticsearch.transport.TransportMessage message, java.lang.String action, org.elasticsearch.common.util.concurrent.ThreadContext context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JwtAuthFailureHandler

public JwtAuthFailureHandler()

Method Detail

failedAuthentication

public org.elasticsearch.ElasticsearchSecurityException failedAuthentication(org.elasticsearch.rest.RestRequest request,
                                                                             org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
                                                                             org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

failedAuthentication in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

failedAuthentication

public org.elasticsearch.ElasticsearchSecurityException failedAuthentication(org.elasticsearch.transport.TransportMessage message,
                                                                             org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
                                                                             java.lang.String action,
                                                                             org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

failedAuthentication in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

missingToken

public org.elasticsearch.ElasticsearchSecurityException missingToken(org.elasticsearch.rest.RestRequest request,
                                                                     org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

missingToken in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

missingToken

public org.elasticsearch.ElasticsearchSecurityException missingToken(org.elasticsearch.transport.TransportMessage message,
                                                                     java.lang.String action,
                                                                     org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

missingToken in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

exceptionProcessingRequest

public org.elasticsearch.ElasticsearchSecurityException exceptionProcessingRequest(org.elasticsearch.rest.RestRequest request,
                                                                                   java.lang.Exception e,
                                                                                   org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

exceptionProcessingRequest in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

exceptionProcessingRequest

public org.elasticsearch.ElasticsearchSecurityException exceptionProcessingRequest(org.elasticsearch.transport.TransportMessage message,
                                                                                   java.lang.String action,
                                                                                   java.lang.Exception e,
                                                                                   org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

exceptionProcessingRequest in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler

authenticationRequired

public org.elasticsearch.ElasticsearchSecurityException authenticationRequired(java.lang.String action,
                                                                               org.elasticsearch.common.util.concurrent.ThreadContext context)

Overrides:

authenticationRequired in class org.elasticsearch.xpack.core.security.authc.DefaultAuthenticationFailureHandler