Package net.shibboleth.idp.plugin.authn.duo.admin.impl

Class ManagePasswordlessCookie

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

org.opensaml.profile.action.AbstractProfileAction

org.opensaml.profile.action.AbstractConditionalProfileAction

net.shibboleth.idp.profile.AbstractProfileAction

net.shibboleth.idp.plugin.authn.duo.admin.impl.ManagePasswordlessCookie

All Implemented Interfaces:

Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action

public class ManagePasswordlessCookie
extends AbstractProfileAction

Administrative management of passwordless cookie by end-user or administrator.

Incoming form fields are used to determine what to do and for whom, with admin manipulation of a cookie for a different identity based on a separate access policy.

Since:

2.1.0

Event:

EventIds.PROCEED_EVENT_ID, EventIds.INVALID_PROFILE_CTX, EventIds.INVALID_MESSAGE, EventIds.ACCESS_DENIED, EventIds.IO_ERROR

Field Summary

Fields

Modifier and Type	Field	Description
private AccessControlService	accessControlService	Access control service.
private PasswordlessCookieManager	cookieManager	Cookie manager to use.
private String	currentUsername	Currently authenticated user.
private final org.slf4j.Logger	log	Class logger.
static final String	OPERATION_FIELD_NAME	Name of form field signalling the operation to perform.
static final String	USERNAME_FIELD_NAME	Name of form field signalling username to operate with.

Constructor Summary

Constructors

Constructor	Description
ManagePasswordlessCookie()

Method Summary

Modifier and Type	Method	Description
protected void	doExecute(ProfileRequestContext profileRequestContext)
protected void	doInitialize()
protected boolean	doPreExecute(ProfileRequestContext profileRequestContext)
private boolean	isAdminAllowed(ProfileRequestContext profileRequestContext, String username)	Tests whether an admin operation (on a different user than is accessing the flow) should be permitted.
void	setAccessControlService(AccessControlService service)	Sets AccessControlService to use for guarding admin access to cookie.
void	setPasswordlessCookieManager(PasswordlessCookieManager manager)	Sets PasswordlessCookieManager to use.

Methods inherited from class net.shibboleth.idp.profile.AbstractProfileAction

doExecute, execute, getBean, getBean, getMessage, getMessage, getMessage, getParameter, getParameter, getProfileContextLookupStrategy, getRequestContext, getResult, setMessageSource, setProfileContextLookupStrategy

Methods inherited from class org.opensaml.profile.action.AbstractConditionalProfileAction

getActivationCondition, setActivationCondition

Methods inherited from class org.opensaml.profile.action.AbstractProfileAction

doPostExecute, doPostExecute, ensureHttpServletRequest, ensureHttpServletResponse, execute, getHttpServletRequest, getHttpServletRequestSupplier, getHttpServletResponse, getHttpServletResponseSupplier, getLogPrefix, isPreExecuteCalled, setHttpServletRequestSupplier, setHttpServletResponseSupplier

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.InitializableComponent

initialize, isInitialized

Field Details

USERNAME_FIELD_NAME

@Nonnull
@NotEmpty
public static final String USERNAME_FIELD_NAME

Name of form field signalling username to operate with.

See Also:

• Constant Field Values

OPERATION_FIELD_NAME

@Nonnull
@NotEmpty
public static final String OPERATION_FIELD_NAME

Name of form field signalling the operation to perform.

See Also:

• Constant Field Values

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

accessControlService

@NonnullAfterInit
private AccessControlService accessControlService

Access control service.

cookieManager

@NonnullAfterInit
private PasswordlessCookieManager cookieManager

Cookie manager to use.

currentUsername

@NonnullBeforeExec
private String currentUsername

Currently authenticated user.

Constructor Details

ManagePasswordlessCookie

public ManagePasswordlessCookie()

Method Details

setAccessControlService

public void setAccessControlService(@Nonnull
 AccessControlService service)

Sets AccessControlService to use for guarding admin access to cookie.

Parameters:

service - access control service

setPasswordlessCookieManager

public void setPasswordlessCookieManager(@Nullable
 PasswordlessCookieManager manager)

Sets PasswordlessCookieManager to use.

Parameters:

manager - cookie manager

doInitialize

protected void doInitialize()
                     throws ComponentInitializationException

Overrides:

doInitialize in class AbstractInitializableComponent

Throws:

ComponentInitializationException

doPreExecute

protected boolean doPreExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doPreExecute in class AbstractConditionalProfileAction

doExecute

protected void doExecute(@Nonnull
 ProfileRequestContext profileRequestContext)

Overrides:

doExecute in class AbstractProfileAction

isAdminAllowed

private boolean isAdminAllowed(@Nonnull
 ProfileRequestContext profileRequestContext,
 @Nonnull @NotEmpty
 String username)

Tests whether an admin operation (on a different user than is accessing the flow) should be permitted.

Parameters:

profileRequestContext - profile request context

username - username to operate on

Returns:

true iff the operation should be permitted