Package org.jasig.cas.authentication

Authentication validates the Credentials provided during a /login request.

See:
Description

Interface Summary

Authentication	The Authentication object represents a successful authentication request.
AuthenticationManager	The AuthenticationManager class is the entity that determines the authenticity of the credentials provided.
AuthenticationMetaDataPopulator	An extension point to the Authentication process that allows CAS to provide additional attributes related to the overall Authentication (such as authentication type) that are specific to the Authentication request versus the Principal itself.

Class Summary

AbstractAuthentication
AbstractAuthenticationManager
AuthenticationManagerImpl	Default implementation of the AuthenticationManager.
DirectMappingAuthenticationManagerImpl	Authentication Manager that provides a direct mapping between credentials provided and the authentication handler used to authenticate the user.
DirectMappingAuthenticationManagerImpl.DirectAuthenticationHandlerMappingHolder
ImmutableAuthentication	Default implementation of Authentication interface.
LinkedAuthenticationHandlerAndCredentialsToPrincipalResolverAuthenticationManager	Ensures that all authentication handlers are tried, but if one is tried, the associated CredentialsToPrincipalResolver is used.
MutableAuthentication	Mutable implementation of Authentication interface.
SamlAuthenticationMetaDataPopulator	AuthenticationMetaDataPopulator to retrieve the Authentication Type.

Package org.jasig.cas.authentication Description

Authentication validates the Credentials provided during a /login request. In this context, "Credentials" are an opaque object declared with the Credentials marker interface. The AuthenticationManager typically passes the Credentials to a sequence of plug-in elements to see if any of them can recognize and process the concrete implementing type.

Successful authentication generates a Principal object wrapped in an Authentication object. All these objects must be serializable, and the Authentication becomes part of the TGT in the ticket cache.

Unsucessful authentication must throw an AuthenticationException. The AuthenticationManager may not return null to signal a failure.