Package org.apache.activemq.artemis.core.security.impl

Class SecurityStoreImpl

java.lang.Object

org.apache.activemq.artemis.core.security.impl.SecurityStoreImpl

All Implemented Interfaces:

SecurityStore, HierarchicalRepositoryChangeListener

public class SecurityStoreImpl
extends Object
implements SecurityStore, HierarchicalRepositoryChangeListener

The ActiveMQ Artemis SecurityStore implementation

Constructor Summary

Constructors

Constructor	Description
SecurityStoreImpl(HierarchicalRepository<Set<Role>> securityRepository, ActiveMQSecurityManager securityManager, long invalidationInterval, boolean securityEnabled, String managementClusterUser, String managementClusterPassword, NotificationService notificationService, long authenticationCacheSize, long authorizationCacheSize)

Method Summary

Modifier and Type	Method	Description
String	authenticate(String user, String password, RemotingConnection connection)
String	authenticate(String user, String password, RemotingConnection connection, String securityDomain)
void	check(SimpleString address, SimpleString queue, CheckType checkType, SecurityAuth session)
void	check(SimpleString address, CheckType checkType, SecurityAuth session)
com.github.benmanes.caffeine.cache.Cache<String,Pair<Boolean,Subject>>	getAuthenticationCache()
long	getAuthenticationCacheSize()
long	getAuthenticationFailureCount()
long	getAuthenticationSuccessCount()
com.github.benmanes.caffeine.cache.Cache<String,ConcurrentHashSet<SimpleString>>	getAuthorizationCache()
long	getAuthorizationCacheSize()
long	getAuthorizationFailureCount()
long	getAuthorizationSuccessCount()
String	getCaller(String user, Subject subject)
Subject	getSessionSubject(SecurityAuth session)	Get the cached Subject.
String	getUserFromSubject(Subject subject)
void	invalidateAuthenticationCache()
void	invalidateAuthorizationCache()
boolean	isSecurityEnabled()
void	onChange()
void	setSecurityEnabled(boolean securityEnabled)
void	stop()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SecurityStoreImpl

public SecurityStoreImpl(HierarchicalRepository<Set<Role>> securityRepository,
 ActiveMQSecurityManager securityManager,
 long invalidationInterval,
 boolean securityEnabled,
 String managementClusterUser,
 String managementClusterPassword,
 NotificationService notificationService,
 long authenticationCacheSize,
 long authorizationCacheSize)
                  throws NoSuchAlgorithmException

Parameters:

notificationService - can be null

Throws:

NoSuchAlgorithmException

Method Details

isSecurityEnabled

public boolean isSecurityEnabled()

Specified by:

isSecurityEnabled in interface SecurityStore

setSecurityEnabled

public void setSecurityEnabled(boolean securityEnabled)

Specified by:

setSecurityEnabled in interface SecurityStore

stop

public void stop()

Specified by:

stop in interface SecurityStore

authenticate

public String authenticate(String user,
 String password,
 RemotingConnection connection)
                    throws Exception

Specified by:

authenticate in interface SecurityStore

Throws:

Exception

authenticate

public String authenticate(String user,
 String password,
 RemotingConnection connection,
 String securityDomain)
                    throws Exception

Specified by:

authenticate in interface SecurityStore

Throws:

Exception

check

public void check(SimpleString address,
 CheckType checkType,
 SecurityAuth session)
           throws Exception

Specified by:

check in interface SecurityStore

Throws:

Exception

check

public void check(SimpleString address,
 SimpleString queue,
 CheckType checkType,
 SecurityAuth session)
           throws Exception

Specified by:

check in interface SecurityStore

Throws:

Exception

onChange

public void onChange()

Specified by:

onChange in interface HierarchicalRepositoryChangeListener

getUserFromSubject

public String getUserFromSubject(Subject subject)

getCaller

public String getCaller(String user,
 Subject subject)

getSessionSubject

public Subject getSessionSubject(SecurityAuth session)

Get the cached Subject. If the Subject is not in the cache then authenticate again to retrieve it.

Specified by:

getSessionSubject in interface SecurityStore

Parameters:

session - contains the authentication data

Returns:

the authenticated Subject with all associated role principals or null if not authenticated or JAAS is not supported by the SecurityManager.

invalidateAuthorizationCache

public void invalidateAuthorizationCache()

invalidateAuthenticationCache

public void invalidateAuthenticationCache()

getAuthenticationCacheSize

public long getAuthenticationCacheSize()

getAuthorizationCacheSize

public long getAuthorizationCacheSize()

getAuthenticationCache

public com.github.benmanes.caffeine.cache.Cache<String,Pair<Boolean,Subject>> getAuthenticationCache()

getAuthorizationCache

public com.github.benmanes.caffeine.cache.Cache<String,ConcurrentHashSet<SimpleString>> getAuthorizationCache()

getAuthenticationSuccessCount

public long getAuthenticationSuccessCount()

Specified by:

getAuthenticationSuccessCount in interface SecurityStore

getAuthenticationFailureCount

public long getAuthenticationFailureCount()

Specified by:

getAuthenticationFailureCount in interface SecurityStore

getAuthorizationSuccessCount

public long getAuthorizationSuccessCount()

Specified by:

getAuthorizationSuccessCount in interface SecurityStore

getAuthorizationFailureCount

public long getAuthorizationFailureCount()

Specified by:

getAuthorizationFailureCount in interface SecurityStore