org.apache.axis.security.servlet

Class ServletSecurityProvider

public class ServletSecurityProvider extends Object implements SecurityProvider

A ServletSecurityProvider, combined with the ServletAuthenticatedUser class, allows the standard servlet security mechanisms (isUserInRole(), etc.) to integrate with Axis' access control mechanism. By utilizing this class (which the AxisServlet can be configured to do automatically), authentication and role information will come from your servlet engine.

Author: Glen Daniels (gdaniels@apache.org)

Field Summary
protected static Loglog
Method Summary
AuthenticatedUserauthenticate(MessageContext msgContext)
Authenticate a user from a username/password pair.
booleanuserMatches(AuthenticatedUser user, String principal)
See if a user matches a principal name.

Field Detail

log

protected static Log log

Method Detail

authenticate

public AuthenticatedUser authenticate(MessageContext msgContext)
Authenticate a user from a username/password pair.

Parameters: username the user name to check password the password to check

Returns: an AuthenticatedUser or null

userMatches

public boolean userMatches(AuthenticatedUser user, String principal)
See if a user matches a principal name. The name might be a user or a group.

Returns: true if the user matches the passed name

Copyright B) 2005 Apache Web Services Project. All Rights Reserved.