fr.cnes.sitools.security
Class SecurityUtil

java.lang.Object
  fr.cnes.sitools.security.SecurityUtil

public final class SecurityUtil
extends java.lang.Object

Utility class for security checking / encrypting

Author:

jp.boignard (AKKA Technologies)

Field Summary

static java.lang.String	DIGEST_MD5_ALGORITHM code setting for DIGEST_MD5 algorithm
static java.lang.String	DIGEST_MD5_PREFIX Prefix for DIGEST MD5 encryption
static java.lang.String	OPENLDAP_MD5_ALGORITHM code setting for OPENLDAP_MD5 algorithm
static java.lang.String	OPENLDAP_MD5_PREFIX Prefix for LDAP MD5 encryption
static java.lang.String	PUBLIC_ROLE public Role
static java.lang.String	PUBLIC_USER public User

Method Summary

static boolean	authorize(SitoolsApplication myApp, java.lang.String userIdentifier, org.restlet.data.Method method) Server internal checks of user authorization on a specific application.
static java.lang.String	digestMd5(java.lang.String identifier, char[] secret, java.lang.String realm) Encryption with HTTP Digest algorithm
static void	encodeUserInscriptionPassword(SitoolsSettings settings, Inscription inscriptionInput) Encrypt password of inscription according to security settings
static void	encodeUserPassword(SitoolsSettings settings, User input) Encrypt password of user according to security settings
static java.util.Set<org.restlet.security.Role>	getRoles(org.restlet.security.User user) Get the roles for a specific user.
static boolean	isEncoded(java.lang.String password) Check if the given password is already encoded or not
static java.lang.String	openldapDigestMd5(java.lang.String password) Encryption with OpenLDAP digest md5 algorithm (<> HTTP digest MD5)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

OPENLDAP_MD5_PREFIX

public static final java.lang.String OPENLDAP_MD5_PREFIX

Prefix for LDAP MD5 encryption

See Also:

Constant Field Values

DIGEST_MD5_PREFIX

public static final java.lang.String DIGEST_MD5_PREFIX

Prefix for DIGEST MD5 encryption

See Also:

Constant Field Values

DIGEST_MD5_ALGORITHM

public static final java.lang.String DIGEST_MD5_ALGORITHM

code setting for DIGEST_MD5 algorithm

See Also:

Constant Field Values

OPENLDAP_MD5_ALGORITHM

public static final java.lang.String OPENLDAP_MD5_ALGORITHM

code setting for OPENLDAP_MD5 algorithm

See Also:

Constant Field Values

PUBLIC_ROLE

public static final java.lang.String PUBLIC_ROLE

public Role

See Also:

Constant Field Values

PUBLIC_USER

public static final java.lang.String PUBLIC_USER

public User

See Also:

Constant Field Values

Method Detail

authorize

public static boolean authorize(SitoolsApplication myApp,
                                java.lang.String userIdentifier,
                                org.restlet.data.Method method)

Server internal checks of user authorization on a specific application.

Parameters:

myApp - Application instance identifier

userIdentifier - user identifier

method - Restlet Method

Returns:

boolean

encodeUserPassword

public static void encodeUserPassword(SitoolsSettings settings,
                                      User input)

Encrypt password of user according to security settings

Parameters:

settings - SitoolsSettings where getting security configuration

input - user on which to encrypt password

encodeUserInscriptionPassword

public static void encodeUserInscriptionPassword(SitoolsSettings settings,
                                                 Inscription inscriptionInput)

Encrypt password of inscription according to security settings

Parameters:

settings - SitoolsSettings where getting security configuration

inscriptionInput - inscription on which to encrypt password

openldapDigestMd5

public static java.lang.String openldapDigestMd5(java.lang.String password)

Encryption with OpenLDAP digest md5 algorithm (<> HTTP digest MD5)

Parameters:

password - user password

Returns:

encrypted key

digestMd5

public static java.lang.String digestMd5(java.lang.String identifier,
                                         char[] secret,
                                         java.lang.String realm)

Encryption with HTTP Digest algorithm

Parameters:

identifier - user login

secret - user password

realm - domain

Returns:

encrypted key

getRoles

public static java.util.Set<org.restlet.security.Role> getRoles(org.restlet.security.User user)

Get the roles for a specific user.

Parameters:

user - the user

Returns:

the Set of Roles

isEncoded

public static boolean isEncoded(java.lang.String password)

Check if the given password is already encoded or not

Parameters:

password - the password to check

Returns:

true if the given password is encoded, false otherwise