All Classes and Interfaces
Class
Description
Base class for all Profile REST clients.
Base for login, logout and access denied REST handlers.
Exception thrown when a request is rejected because of a problem with the access token (not provided, expired or not found).
Thrown when a user doesn't have enough privileges to access a resource.
Handles the request after access to a resource is denied for a user.
Default implementation of
AccessDeniedHandler, which forwards to the error page URL, so that the original
URL is preserved in the browser.Instances of this class are used as the root object for Spring EL
Expressions that are used to evaluate
access restrictions.Access token given to applications that need to access the REST API, acting for any tenant of a list.
Filter that checks that in every call the access token ID is specified, and that it's a recognized access token ID and
is not expired.
REST controller for the access token service.
MVC Controller for displaying and modifying tenants.
Thrown when a create access token operation fails because an access token with the same properties already exists.
Resolves the access token ID to use for REST calls to profile.
Repository for storing
AccessToken.Default implementation of
AccessTokenRepository, using Jongo.Service for managing access tokens.
Default implementation of
AccessTokenService.REST client implementation of
AccessTokenService.SubjectResolver that resolves to the current
AccessToken.Utility methods for
AccessTokens.The actions that a user can execute in the admin console.
RequestSecurityProcessor implementation that creates a wrapper so that
the ticket and profile last update cookies are added to the response, just before it is sent to the client.TenantsResolver that uses all the available tenants.Enum with the actions that can be executed on attributes by applications.
Thrown if an attribute has already been defined.
Represents the definition of an attribute in a tenant.
Thrown when an attribute definition is being updated or when an attribute value is being set but not attribute
definition was found.
Permission specific for attributes.PermissionResolver for attributes.Represents a successful authentication.
Cache for
Authentication objects.REST controller for the authentication service.
General exception thrown by the authentication service.
RequestSecurityProcessor that auto logins a user through the headers
provided by the Apache mod_auth_mellon SAML authentication module.Manages authentication.
Default implementation of
AuthenticationManager.Thrown if the user is required to authenticate to access a resource.
Handles the request when authentication is required.
Default implementation of
AuthenticationRequiredHandler:
Saves the current request so it can be reused after successful login.
Redirects to the login form URL.
Service for handling authentication for users.
Default implementation of
AuthenticationService.REST client implementation of
AuthenticationService.Thrown when something in the authentication system fails.
Authorization related utility methods.
Thrown when a username/password pair is invalid.
Thrown when user authentication fails because of invalid username/password.
Utility methods related with connections with providers.
Thrown when a remember me cookie has been possibly stolen and is being used.
Obtains and sets the authentication for the current request.
SubjectResolver that returns the currently authenticated
profileDefault admin console permission.
Default implementation of
Authentication.TenantsResolver that uses default tenant values.Thrown when an operation on a profile (like authentication) can't be performed because the profile is disabled.
Thrown if an authentication attempt is performed with a disabled user.
Contains profile's error codes.
Information transmitted to the client when an error occurs.
ControllerAdvice for controllers that includes exception
handling for all exceptions.ControllerAdvice for controllers that includes exception
handling for all known exceptions.Implementation of
AuthenticationCache that uses a Guava Cache.Localized version of
ProfileException.Run initial JSON data insert task at startup if flagged
Run initial collection fields update at startup if flagged
Thrown when a remember me cookie provided has an invalid format.
Thrown when an email address is in an invalid format.
Thrown when a specified Mongo query is invalid, because of illegal operators ($where) or non-readable attributes.
Thrown when a request parameter is invalid.
Handles the request after a failed authentication.
Default implementation of
LoginFailureHandler, which redirects the
response to a target URL or 401 is sent if there's no target URL.Processes login requests.
Handles the response after a successful authentication.
Default implementation of
LoginSuccessHandler:
Deletes any authentication exception saved in the session.
Adds the ticket ID and profile last modified cookies to response.
Uses the Spring RequestCache to obtain the previous request before login and redirect to it.
Processes logout requests.
Handles the request after a successful logout.
Default implementation for
LogoutSuccessHandlerImpl, which
redirects to a target URL.Controller for the main view.
ControllerAdvice that defines common model attributes for all
view controllers.Rest controller to provide monitoring information
Thrown when a specified access token ID doesn't correspond to any known access token.
Thrown if no persistent login with a specified ID was found.
Thrown if no profile with a specified ID was found.
Thrown if no tenant with a specified name was found.
Thrown if no ticket with a specified ID was found.
Thrown when a serialized verification token is in an invalid format.
Exception used when a OAuth2 provider returns an error on a login attempt.
Thrown the JSON in a param can't be correctly deserialized.
TenantsResolver that resolves the tenants through a param.Represents a persistent authentication or login, triggered by remember me functionality.
DB repository for
PersistentLogins.Default implementation of
PersistentLogin.Representation of a user.
Profile permission for the PROFILE_ADMIN role.
Tenant permission for the PROFILE_ADMIN role.
Common constants.
REST controller for the profile service.
MVC Controller for displaying and modifying profiles.
Root exception for profile.
Thrown when a create profile operation fails because a profile with the same tenant and username already exists.
Implementation of
EntitlementUsageProvider for Crafter Profile module.Throw when account had too much failed attempts.
PermissionResolver for profile permissions.DB repository for
Profiles.Default implementation of
ProfileRepository.ProfileException used by clients to indicate a REST service error.Service for handling profiles.
Default implementation of
ProfileService.REST client implementation of
ProfileService.Created by alfonsovasquez on 14/6/16.
Helper class that allows for executing logins with a social service provider like Facebook, Twitter, LinkedIn, etc.
Default implementation of
ProviderLoginSupport.Utility class for redirection.
Aspect for
ProfileService that refreshes the current authentication
object when the profile associated to the authentication is updated.RequestSecurityProcessor that executes auto login when a valid remember
me cookie is found in the request and there's no authentication present yet.Root exception for remember me related errors.
Manages remember me functionality.
Default implementation of
RememberMeManager.Filter for running security.
Implementations should process a request to enforce a security aspect (authentication, authorization, etc.).
Represents a chain of
RequestSecurityProcessors.Default implementation of a handler chain, using an iterator.
RuntimeException thrown when a resource (like a profile or tenant) couldn't be foundImplementation of
AccessDeniedHandler for REST based applications,
which returns a 403 FORBIDDEN status with the access denied exception message.Implementation of
AuthenticationRequiredHandler for REST based
applications, which returns a 401 UNAUTHORIZED status with the authentication exception message.Implementation of
LoginFailureHandler for REST based applications,
which returns a 401 UNAUTHORIZED status with a the authentication exception message.Implementation of
LoginSuccessHandler for REST based applications,
which returns the Authentication object as the response body.Implementation of
LogoutSuccessHandler for REST based applications,
which just returns a 200 OK status with a simple success message.RequestSecurityProcessor that returns the current authentication to the
client.Annotation used to indicate that a certain method should be executed only if security is enabled.
Aspect that handles the
RunIfSecurityEnabled annotationUses
RequestCache to reconstitute a previously saved request (if there's one).Interface implemented by objects that need to be notified if security is enabled or not.
BeanPostProcessor implementation that passes the securityEnabled property to beans that
implement the SecurityEnabledAware interface.Handles certain security exceptions:
If it's an
AuthenticationRequiredException, the AuthenticationRequiredHandler is used.
If it's an AccessDeniedException, and the user is anonymous, the AuthenticationRequiredHandler
is used.Root class of security provider related exceptions
Contains security utility methods.
Implementation of
AccessTokenIdResolver that uses a single
access token ID, set as property.The sort order used by services the return a list of sorted objects
Permission that ensures that the current profile isn't trying to modify another profile if the former has an
inferior role than the later.
Permission that ensures that the current profile isn't trying to modify a tenant that it's not its own tenant or
a profile that doesn't correspond to its own tenant.
Permission for the PROFILE_SUPERADMIN role (can do anything).
A tenant is normally an application that shares common configuration.
Enum with actions that can be executed on tenants and their user profiles by applications.
Profile permission for the PROFILE_TENANT_ADMIN role.
Tenant permission for the PROFILE_TENANT_ADMIN role.
REST controller for the tenant service.
MVC Controller for displaying and modifying tenants.
Thrown when a create tenant operation fails because a tenant with the same name already exists.
Permission specific for tenants.PermissionResolver for tenant permissions.PermissionResolver for tenants.DB repository for
TenantsDefault implementation of
TenantRepository.Service for managing tenants.
Default implementation of
TenantService.REST client implementation of
TenantService.Utility interface that can be implemented to resolve the tenants usable by the application.
TenantsResolver that returns the first tenants resolved by any resolver.Created by alfonsovasquez on 20/6/16.
Tenant related utility methods.
An authentication ticket for a profile.
DB repository for
Tickets.Default implementation of
TicketRepository.Processor that checks if the current user has permission to access the current request URL.
Service used to verify a particular activity with the profile owner (like a recently created profile or a reset
password request).
Default implementation of
VerificationService.Verification token, used for email related verification.
Repository for
VerificationTokensDefault implementation of
VerificationTokenRepository.