Package org.apache.nifi.web.security.x509

Class X509AuthenticationProvider

java.lang.Object

org.apache.nifi.web.security.NiFiAuthenticationProvider

org.apache.nifi.web.security.x509.X509AuthenticationProvider

All Implemented Interfaces:

org.springframework.security.authentication.AuthenticationProvider

public class X509AuthenticationProvider
extends NiFiAuthenticationProvider

Field Summary

Fields

Modifier and Type	Field	Description
private Authorizer	authorizer
private X509IdentityProvider	certificateIdentityProvider
private static final org.slf4j.Logger	LOGGER
(package private) final NiFiProperties	properties
private static final Authorizable	PROXY_AUTHORIZABLE

Constructor Summary

Constructors

Constructor	Description
X509AuthenticationProvider(X509IdentityProvider certificateIdentityProvider, Authorizer authorizer, NiFiProperties nifiProperties)

Method Summary

Modifier and Type	Method	Description
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
protected static NiFiUser	createUser(String identity, Set<String> groups, Set<String> idpGroups, NiFiUser chain, String clientAddress, boolean isAnonymous)	Returns a regular user populated with the provided values, or if the user should be anonymous, a well-formed instance of the anonymous user with the provided values.
private void	logProxyChain(NiFiUser chain)
boolean	supports(Class<?> authentication)

Methods inherited from class org.apache.nifi.web.security.NiFiAuthenticationProvider

getMappings, getUserGroups, mapIdentity

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGGER

private static final org.slf4j.Logger LOGGER

PROXY_AUTHORIZABLE

private static final Authorizable PROXY_AUTHORIZABLE

certificateIdentityProvider

private X509IdentityProvider certificateIdentityProvider

authorizer

private Authorizer authorizer

properties

final NiFiProperties properties

Constructor Details

X509AuthenticationProvider

public X509AuthenticationProvider(X509IdentityProvider certificateIdentityProvider,
 Authorizer authorizer,
 NiFiProperties nifiProperties)

Method Details

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException

Throws:

org.springframework.security.core.AuthenticationException

logProxyChain

private void logProxyChain(NiFiUser chain)

createUser

protected static NiFiUser createUser(String identity,
 Set<String> groups,
 Set<String> idpGroups,
 NiFiUser chain,
 String clientAddress,
 boolean isAnonymous)

Returns a regular user populated with the provided values, or if the user should be anonymous, a well-formed instance of the anonymous user with the provided values.

Parameters:

identity - the user's identity

chain - the proxied entities

clientAddress - the requesting IP address

isAnonymous - if true, an anonymous user will be returned (identity will be ignored)

Returns:

the populated user

supports

public boolean supports(Class<?> authentication)