org.apache.ws.security.spnego
Class SpnegoTokenContext

java.lang.Object
  org.apache.ws.security.spnego.SpnegoTokenContext

public class SpnegoTokenContext
extends java.lang.Object

This class wraps a GSSContext and provides some functionality to obtain and validate spnego tokens.

Constructor Summary

SpnegoTokenContext()

Method Summary

void	clear()
byte[]	getToken() Get the SPNEGO token that was created.
boolean	isEstablished() Whether a connection has been established (at the service side)
void	retrieveServiceTicket(java.lang.String jaasLoginModuleName, javax.security.auth.callback.CallbackHandler callbackHandler, java.lang.String serviceName) Retrieve a service ticket from a KDC using the Kerberos JAAS module, and set it in this BinarySecurityToken.
void	setMutualAuth(boolean mutualAuthentication) Whether to enable mutual authentication or not.
void	setSpnegoClientAction(SpnegoClientAction spnegoClientAction) Set a custom SpnegoClientAction implementation to use
void	setSpnegoServiceAction(SpnegoServiceAction spnegoServiceAction) Set a custom SpnegoServiceAction implementation to use
byte[]	unwrapKey(byte[] secret) Unwrap a key
void	validateServiceTicket(java.lang.String jaasLoginModuleName, javax.security.auth.callback.CallbackHandler callbackHandler, java.lang.String serviceName, byte[] ticket) Validate a service ticket.
byte[]	wrapKey(byte[] secret) Wrap a key

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SpnegoTokenContext

public SpnegoTokenContext()

Method Detail

retrieveServiceTicket

public void retrieveServiceTicket(java.lang.String jaasLoginModuleName,
                                  javax.security.auth.callback.CallbackHandler callbackHandler,
                                  java.lang.String serviceName)
                           throws WSSecurityException

Retrieve a service ticket from a KDC using the Kerberos JAAS module, and set it in this BinarySecurityToken.

Parameters:

jaasLoginModuleName - the JAAS Login Module name to use

callbackHandler - a CallbackHandler instance to retrieve a password (optional)

serviceName - the desired Kerberized service

Throws:

WSSecurityException

validateServiceTicket

public void validateServiceTicket(java.lang.String jaasLoginModuleName,
                                  javax.security.auth.callback.CallbackHandler callbackHandler,
                                  java.lang.String serviceName,
                                  byte[] ticket)
                           throws WSSecurityException

Validate a service ticket.

Parameters:

jaasLoginModuleName -

callbackHandler -

serviceName -

ticket -

Throws:

WSSecurityException

setMutualAuth

public void setMutualAuth(boolean mutualAuthentication)

Whether to enable mutual authentication or not. This only applies to retrieve service ticket.

getToken

public byte[] getToken()

Get the SPNEGO token that was created.

isEstablished

public boolean isEstablished()

Whether a connection has been established (at the service side)

unwrapKey

public byte[] unwrapKey(byte[] secret)
                 throws WSSecurityException

Unwrap a key

Throws:

WSSecurityException

wrapKey

public byte[] wrapKey(byte[] secret)
               throws WSSecurityException

Wrap a key

Throws:

WSSecurityException

setSpnegoClientAction

public void setSpnegoClientAction(SpnegoClientAction spnegoClientAction)

Set a custom SpnegoClientAction implementation to use

setSpnegoServiceAction

public void setSpnegoServiceAction(SpnegoServiceAction spnegoServiceAction)

Set a custom SpnegoServiceAction implementation to use

clear

public void clear()