org.jasig.cas.authentication.principal

Class ChainingPrincipalResolver

java.lang.Object

org.jasig.cas.authentication.principal.ChainingPrincipalResolver

All Implemented Interfaces:

PrincipalResolver

public class ChainingPrincipalResolver
extends Object
implements PrincipalResolver

Delegates to one or more principal resolves in series to resolve a principal. The input to first configured resolver is the authenticated credential; for every subsequent resolver, the input is a Credential whose ID is the resolved princpial ID of the previous resolver.

A common use case for this component is resolving a temporary principal ID from an X.509 credential followed by a search (e.g. LDAP, database) for the final principal based on the temporary ID.

Since:

4.0

Author:

Marvin S. Addison

Constructor Summary

Constructors

Constructor and Description
ChainingPrincipalResolver()

Method Summary

Methods

Modifier and Type	Method and Description
Principal	resolve(Credential credential) Resolves a credential by delegating to each of the configured resolvers in sequence.
void	setChain(List<PrincipalResolver> chain) Sets the resolver chain.
boolean	supports(Credential credential) Determines whether the credential is supported by this component by delegating to the first configured resolver in the chain.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ChainingPrincipalResolver

public ChainingPrincipalResolver()

Method Detail

setChain

public void setChain(List<PrincipalResolver> chain)

Sets the resolver chain. The resolvers other than the first one MUST be capable of performing resolution on the basis of Credential.getId() alone; PersonDirectoryPrincipalResolver notably meets that requirement.

Parameters:

chain - List of delegate resolvers that are invoked in a chain.

resolve

public Principal resolve(Credential credential)

Resolves a credential by delegating to each of the configured resolvers in sequence. Note that the PrincipalResolver.supports(org.jasig.cas.authentication.Credential) method is called only for the first configured resolver.

Specified by:

resolve in interface PrincipalResolver

Parameters:

credential - Authenticated credential.

Returns:

The principal from the last configured resolver in the chain.

supports

public boolean supports(Credential credential)

Determines whether the credential is supported by this component by delegating to the first configured resolver in the chain.

Specified by:

supports in interface PrincipalResolver

Parameters:

credential - The credential to check for support.

Returns:

True if the first configured resolver in the chain supports the credential, false otherwise.