com.google.gerrit.server.account

Interface Realm

All Known Implementing Classes:

AbstractRealm, DefaultRealm, FakeRealm, OAuthRealm

public interface Realm

Method Summary

Modifier and Type	Method and Description
default boolean	accountBelongsToRealm(java.util.Collection<ExternalId> externalIds)
boolean	allowsEdit(AccountFieldName field) Can the end-user modify this field of their own account?
AuthRequest	authenticate(AuthRequest who)
java.util.Set<AccountFieldName>	getEditableFields() Returns the account fields that the end-user can modify.
java.util.Set<java.lang.String>	getEmailAddresses(IdentifiedUser who)
boolean	hasEmailAddress(IdentifiedUser who, java.lang.String email)
default boolean	isActive(java.lang.String username)
Account.Id	lookup(java.lang.String accountName) Locate an account whose local username is the given account name.
void	onCreateAccount(AuthRequest who, Account account)

Method Detail

allowsEdit

boolean allowsEdit(AccountFieldName field)

Can the end-user modify this field of their own account?

getEditableFields

java.util.Set<AccountFieldName> getEditableFields()

Returns the account fields that the end-user can modify.

authenticate

AuthRequest authenticate(AuthRequest who)
                  throws AccountException

Throws:

AccountException

onCreateAccount

void onCreateAccount(AuthRequest who,
                     Account account)

hasEmailAddress

boolean hasEmailAddress(IdentifiedUser who,
                        java.lang.String email)

Returns:

true if the user has the given email address.

getEmailAddresses

java.util.Set<java.lang.String> getEmailAddresses(IdentifiedUser who)

Returns:

all known email addresses for the identified user.

lookup

Account.Id lookup(java.lang.String accountName)
           throws java.io.IOException

Locate an account whose local username is the given account name.

Generally this only works for local realms, such as one backed by an LDAP directory, or where there is an EmailExpander configured that knows how to convert the accountName into an email address, and then locate the user by that email address.

Throws:

java.io.IOException

isActive

default boolean isActive(java.lang.String username)
                  throws javax.security.auth.login.LoginException,
                         javax.naming.NamingException,
                         AccountException,
                         java.io.IOException

Returns:

true if the account is active.

Throws:

javax.naming.NamingException

javax.security.auth.login.LoginException

AccountException

java.io.IOException

accountBelongsToRealm

default boolean accountBelongsToRealm(java.util.Collection<ExternalId> externalIds)

Returns:

true if the account is backed by the realm, false otherwise.