com.sun.identity.wss.security.handler
Interface MessageAuthenticator

public interface MessageAuthenticator

This interface provides a pluggable authenticator for the webservices to authenticate their clients using various security mechanisms.

Method Summary

java.lang.Object

authenticate(javax.security.auth.Subject subject, SecurityMechanism securityMechanism, SecurityToken securityToken, ProviderConfig config, java.lang.Object secureMessage, boolean isLiberty) Authenticates the web services client.

Method Detail

authenticate

public java.lang.Object authenticate(javax.security.auth.Subject subject,
                                     SecurityMechanism securityMechanism,
                                     SecurityToken securityToken,
                                     ProviderConfig config,
                                     java.lang.Object secureMessage,
                                     boolean isLiberty)
                              throws com.sun.identity.wss.security.SecurityException

Authenticates the web services client.

Parameters:

subject - the JAAS subject that may be used during authentication.

securityMechanism - the security mechanism that will be used to authenticate the web services client.

securityToken - the security token that is used.

config - the provider configuration.

secureMessage - the secure SOAPMessage. If the message security is provided by the WS-I profies, the secureMessage object is of type com.sun.identity.wss.security.handler.SecureSOAPMessage. * If the message security is provided by the Liberty ID-WSF profiles, the secure message is of type com.sun.identity.liberty.ws.soapbinding.Message.

isLiberty - boolean variable to indicate that the message security is provided by the liberty security profiles.

Throws:

com.sun.identity.wss.security.SecurityException - if there is a failure in authentication.