AuthActions

Type Members

trait AbstractApiAuthAction extends ActionBuilder[UserRequest]

Abstraction for API auth actions allowing to mix in custom results for each of the different error scenarios.
trait PlainErrorResponses extends AnyRef

Abstract Value Members

abstract def authCallbackUrl: String

The auth callback url.
The auth callback url. This is where google will send the user after authentication. This action on this url should invoke processGoogleCallback
returns
abstract def domain: String

Definition Classes
PanDomainAuth
abstract def system: String

Definition Classes
PanDomainAuth
abstract def validateUser(authedUser: AuthenticatedUser): Boolean

Returns true if the authed user is valid in the implementing system (meets your multifactor requirements, you recognise the email etc.
Returns true if the authed user is valid in the implementing system (meets your multifactor requirements, you recognise the email etc.).
If your implementing application needs to audit logins / register new users etc then this ia also the place to do it (although in this case you should strongly consider setting cacheValidation to true).
authedUser
returns
true if the user is valid in your app

Concrete Value Members

final def !=(arg0: AnyRef): Boolean

Definition Classes
AnyRef
final def !=(arg0: Any): Boolean

Definition Classes
Any
final def ##(): Int

Definition Classes
AnyRef → Any
final def ==(arg0: AnyRef): Boolean

Definition Classes
AnyRef
final def ==(arg0: Any): Boolean

Definition Classes
Any
val ANTI_FORGERY_KEY: String
object APIAuthAction extends AbstractApiAuthAction with PlainErrorResponses

Action that ensures the user is logged in and validated.
object AuthAction extends ActionBuilder[UserRequest]

Action that ensures the user is logged in and validated.
val GoogleAuth: GoogleAuth
val LOGIN_ORIGIN_KEY: String

A Play session key that stores the target URL that was being accessed when redirected for authentication
lazy val actorSystem: ActorSystem

Definition Classes
PanDomainAuth
def apiGracePeriod: Long

Adding an expiry extension to APIAuthActions allows for a delay between an applications authentication and their respective API XHR calls expiring.
Adding an expiry extension to APIAuthActions allows for a delay between an applications authentication and their respective API XHR calls expiring.
By default this is 0 and thus disabled.
This is particularly useful for SPAs where users have third party cookies disabled.
returns
the amount of delay between App and API expiry in milliseconds
final def asInstanceOf[T0]: T0

Definition Classes
Any
lazy val authSettings: Agent[PanDomainAuthSettings]

Definition Classes
PanDomainAuth
def awsCredentialsProvider: AWSCredentialsProvider

Definition Classes
PanDomainAuth
def awsRegion: Option[Region]

Definition Classes
PanDomainAuth
lazy val bucket: S3Bucket

Definition Classes
PanDomainAuth
def cacheValidation: Boolean

By default the validity of the user is checked every request.
By default the validity of the user is checked every request. If your validateUser implementation is expensive or has side effects you can override this to true and validity will only be checked the first time the user visits your app after their login is established.
Note the the cache is invalidated after the user's session is re-established with google.
returns
true if you want to only check the validity of the user once for the lifetime of the user's auth session
def checkMultifactor(authedUser: AuthenticatedUser): Boolean
def clone(): AnyRef

Attributes
protected[java.lang]
Definition Classes
AnyRef
Annotations
@throws( ... )
lazy val domainSettingsRefreshActor: ActorRef

Definition Classes
PanDomainAuth
final def eq(arg0: AnyRef): Boolean

Definition Classes
AnyRef
def equals(arg0: Any): Boolean

Definition Classes
AnyRef → Any
def extractAuth(request: RequestHeader): AuthenticationStatus

Extract the authentication status from the request.
def finalize(): Unit

Attributes
protected[java.lang]
Definition Classes
AnyRef
Annotations
@throws( classOf[java.lang.Throwable] )
def flushCookie(result: Result): Result
def generateCookies(authedUser: AuthenticatedUser): List[Cookie]
final def getClass(): Class[_]

Definition Classes
AnyRef → Any
def hashCode(): Int

Definition Classes
AnyRef → Any
def includeSystemInCookie(authedUser: AuthenticatedUser)(result: Result): Result
def invalidUserMessage(claimedAuth: AuthenticatedUser): String

Generates the message shown to the user when user validation fails.
Generates the message shown to the user when user validation fails. override this to add a custom error message
claimedAuth
returns
final def isInstanceOf[T0]: Boolean

Definition Classes
Any
val multifactorChecker: Option[Google2FAGroupChecker]
final def ne(arg0: AnyRef): Boolean

Definition Classes
AnyRef
final def notify(): Unit

Definition Classes
AnyRef
final def notifyAll(): Unit

Definition Classes
AnyRef
def processGoogleCallback()(implicit request: RequestHeader): Future[Result]
def processLogout(implicit request: RequestHeader): Result
def proxyConfiguration: Option[ProxyConfiguration]

Definition Classes
PanDomainAuth
def readAuthenticatedUser(request: RequestHeader): Option[AuthenticatedUser]
def readCookie(request: RequestHeader): Option[Cookie]
def sendForAuth[A](implicit request: RequestHeader, email: Option[String] = None): Future[Result]

starts the authentication process for a user.
starts the authentication process for a user. By default this just sends the user off to google for auth but if you want to show welcome page with a button on it then override.
def settings: PanDomainAuthSettings

Definition Classes
PanDomainAuth
lazy val settingsMap: Map[String, String]

Definition Classes
PanDomainAuth
def showUnauthedMessage(message: String)(implicit request: RequestHeader): Result

invoked when the user is not logged in a can't be authed - this may be when the user is not valid in yur system or when they have exoplicitly logged out.
invoked when the user is not logged in a can't be authed - this may be when the user is not valid in yur system or when they have exoplicitly logged out.
Override this to add a logged out screen and display maeesages for your app. The default implementation is to ust return a 403 response
message
request
returns
def shutdown: Unit

Definition Classes
PanDomainAuth
final def synchronized[T0](arg0: ⇒ T0): T0

Definition Classes
AnyRef
def toString(): String

Definition Classes
AnyRef → Any
final def wait(): Unit

Definition Classes
AnyRef
Annotations
@throws( ... )
final def wait(arg0: Long, arg1: Int): Unit

Definition Classes
AnyRef
Annotations
@throws( ... )
final def wait(arg0: Long): Unit

Definition Classes
AnyRef
Annotations
@throws( ... )

trait AuthActions extends PanDomainAuth

Type Members

trait AbstractApiAuthAction extends ActionBuilder[UserRequest]

trait PlainErrorResponses extends AnyRef

Abstract Value Members

abstract def authCallbackUrl: String

abstract def domain: String

abstract def system: String

abstract def validateUser(authedUser: AuthenticatedUser): Boolean

Concrete Value Members

final def !=(arg0: AnyRef): Boolean

final def !=(arg0: Any): Boolean

final def ##(): Int

final def ==(arg0: AnyRef): Boolean

final def ==(arg0: Any): Boolean

val ANTI_FORGERY_KEY: String

object APIAuthAction extends AbstractApiAuthAction with PlainErrorResponses

object AuthAction extends ActionBuilder[UserRequest]

val GoogleAuth: GoogleAuth

val LOGIN_ORIGIN_KEY: String

lazy val actorSystem: ActorSystem

def apiGracePeriod: Long

final def asInstanceOf[T0]: T0

lazy val authSettings: Agent[PanDomainAuthSettings]

def awsCredentialsProvider: AWSCredentialsProvider

def awsRegion: Option[Region]

lazy val bucket: S3Bucket

def cacheValidation: Boolean

def checkMultifactor(authedUser: AuthenticatedUser): Boolean

def clone(): AnyRef

lazy val domainSettingsRefreshActor: ActorRef

final def eq(arg0: AnyRef): Boolean

def equals(arg0: Any): Boolean

def extractAuth(request: RequestHeader): AuthenticationStatus

def finalize(): Unit

def flushCookie(result: Result): Result

def generateCookies(authedUser: AuthenticatedUser): List[Cookie]

final def getClass(): Class[_]

def hashCode(): Int

def includeSystemInCookie(authedUser: AuthenticatedUser)(result: Result): Result

def invalidUserMessage(claimedAuth: AuthenticatedUser): String

final def isInstanceOf[T0]: Boolean

val multifactorChecker: Option[Google2FAGroupChecker]

final def ne(arg0: AnyRef): Boolean

final def notify(): Unit

final def notifyAll(): Unit

def processGoogleCallback()(implicit request: RequestHeader): Future[Result]

def processLogout(implicit request: RequestHeader): Result

def proxyConfiguration: Option[ProxyConfiguration]

def readAuthenticatedUser(request: RequestHeader): Option[AuthenticatedUser]

def readCookie(request: RequestHeader): Option[Cookie]

def sendForAuth[A](implicit request: RequestHeader, email: Option[String] = None): Future[Result]

def settings: PanDomainAuthSettings

lazy val settingsMap: Map[String, String]

def showUnauthedMessage(message: String)(implicit request: RequestHeader): Result

def shutdown: Unit

final def synchronized[T0](arg0: ⇒ T0): T0

def toString(): String

final def wait(): Unit

final def wait(arg0: Long, arg1: Int): Unit

final def wait(arg0: Long): Unit

Inherited from PanDomainAuth

Inherited from AnyRef

Inherited from Any

Ungrouped