org.yamcs.security

Class BasicArtemisAuthModule

java.lang.Object

org.yamcs.security.BasicArtemisAuthModule

All Implemented Interfaces:

org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager

public class BasicArtemisAuthModule
extends Object
implements org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager

Authenticates and authorises ActiveMQ sessions from configured realm. See Privilege for information on authentication, authorisation and caching A default user is used for anonymous (non-authenticated) connections. Specify a default user (and associated roles) in hornetq-users.xml. If no default user is configured, anonymous connections will be rejected.

Author:

atu

Constructor Summary

Constructors

Constructor and Description
BasicArtemisAuthModule()

Method Summary

Modifier and Type	Method and Description
boolean	isSuperUser(String username, String password) Determines if no restrictions should be applied to the specified user, which can mean either that privileges are disabled (everyone has all privilieges), or that the user is an in-process user.
boolean	validateUser(String username, String password)
boolean	validateUserAndRole(String username, String password, Set<org.apache.activemq.artemis.core.security.Role> configuredRoles, org.apache.activemq.artemis.core.security.CheckType checkType)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BasicArtemisAuthModule

public BasicArtemisAuthModule()

Method Detail

isSuperUser

public boolean isSuperUser(String username,
                           String password)

Determines if no restrictions should be applied to the specified user, which can mean either that privileges are disabled (everyone has all privilieges), or that the user is an in-process user. Internal messaging user (in-vm user) is the only current super-user. Null username or password always returns false if privileges enabled.

Parameters:

username -

password -

Returns:

True if configured to not use privileges (see Privilege) or if username and password match a super user.

validateUser

public boolean validateUser(String username,
                            String password)

Specified by:

validateUser in interface org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager

validateUserAndRole

public boolean validateUserAndRole(String username,
                                   String password,
                                   Set<org.apache.activemq.artemis.core.security.Role> configuredRoles,
                                   org.apache.activemq.artemis.core.security.CheckType checkType)

Specified by:

validateUserAndRole in interface org.apache.activemq.artemis.spi.core.security.ActiveMQSecurityManager

Parameters:

configuredRoles - - Set of roles configured for the component being accessed.

checkType - - Permission being sought.