org.springframework.ws.soap.security.wss4j.callback
Class SpringDigestPasswordValidationCallbackHandler

java.lang.Object
  org.springframework.ws.soap.security.callback.AbstractCallbackHandler
      org.springframework.ws.soap.security.wss4j.callback.AbstractWsPasswordCallbackHandler
          org.springframework.ws.soap.security.wss4j.callback.SpringDigestPasswordValidationCallbackHandler

All Implemented Interfaces:

javax.security.auth.callback.CallbackHandler, org.springframework.beans.factory.InitializingBean

public class SpringDigestPasswordValidationCallbackHandler
extends AbstractWsPasswordCallbackHandler
implements org.springframework.beans.factory.InitializingBean

Callback handler that validates a password digest using an Spring Security UserDetailsService. Logic based on Spring Security's DigestProcessingFilter.

An Spring Security UserDetailService is used to load UserDetails from. The digest of the password contained in this details object is then compared with the digest in the message.

Since:

1.5.0

Author:

Arjen Poutsma

See Also:

UserDetailsService, org.springframework.security.ui.digestauth.DigestProcessingFilter

Field Summary

Fields inherited from class org.springframework.ws.soap.security.callback.AbstractCallbackHandler

logger

Constructor Summary

SpringDigestPasswordValidationCallbackHandler()

Method Summary

void	afterPropertiesSet()
protected void	handleCleanup(CleanupCallback callback) Invoked when a CleanupCallback is passed to AbstractCallbackHandler.handle(Callback[]).
protected void	handleUsernameToken(org.apache.ws.security.WSPasswordCallback callback) Invoked when the callback has a WSPasswordCallback.USERNAME_TOKEN usage.
protected void	handleUsernameTokenPrincipal(UsernameTokenPrincipalCallback callback) Invoked when a UsernameTokenPrincipalCallback is passed to AbstractCallbackHandler.handle(Callback[]).
void	setUserCache(org.springframework.security.core.userdetails.UserCache userCache) Sets the users cache.
void	setUserDetailsService(org.springframework.security.core.userdetails.UserDetailsService userDetailsService) Sets the Spring Security user details service.

Methods inherited from class org.springframework.ws.soap.security.wss4j.callback.AbstractWsPasswordCallbackHandler

handleCustomToken, handleDecrypt, handleEncryptedKeyToken, handleInternal, handleKeyName, handleSecurityContextToken, handleSignature, handleUsernameTokenUnknown

Methods inherited from class org.springframework.ws.soap.security.callback.AbstractCallbackHandler

handle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SpringDigestPasswordValidationCallbackHandler

public SpringDigestPasswordValidationCallbackHandler()

Method Detail

setUserCache

public void setUserCache(org.springframework.security.core.userdetails.UserCache userCache)

Sets the users cache. Not required, but can benefit performance.

setUserDetailsService

public void setUserDetailsService(org.springframework.security.core.userdetails.UserDetailsService userDetailsService)

Sets the Spring Security user details service. Required.

afterPropertiesSet

public void afterPropertiesSet()
                        throws java.lang.Exception

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Throws:

java.lang.Exception

handleUsernameToken

protected void handleUsernameToken(org.apache.ws.security.WSPasswordCallback callback)
                            throws java.io.IOException,
                                   javax.security.auth.callback.UnsupportedCallbackException

Description copied from class: AbstractWsPasswordCallbackHandler

Invoked when the callback has a WSPasswordCallback.USERNAME_TOKEN usage.

This method is invoked when WSS4J needs the password to fill in or to verify a UsernameToken.

Default implementation throws an UnsupportedCallbackException.

Overrides:

handleUsernameToken in class AbstractWsPasswordCallbackHandler

Throws:

java.io.IOException

javax.security.auth.callback.UnsupportedCallbackException

handleUsernameTokenPrincipal

protected void handleUsernameTokenPrincipal(UsernameTokenPrincipalCallback callback)
                                     throws java.io.IOException,
                                            javax.security.auth.callback.UnsupportedCallbackException

Description copied from class: AbstractWsPasswordCallbackHandler

Invoked when a UsernameTokenPrincipalCallback is passed to AbstractCallbackHandler.handle(Callback[]).

Default implementation throws an UnsupportedCallbackException.

Overrides:

handleUsernameTokenPrincipal in class AbstractWsPasswordCallbackHandler

Throws:

java.io.IOException

javax.security.auth.callback.UnsupportedCallbackException

handleCleanup

protected void handleCleanup(CleanupCallback callback)
                      throws java.io.IOException,
                             javax.security.auth.callback.UnsupportedCallbackException

Description copied from class: AbstractWsPasswordCallbackHandler

Invoked when a CleanupCallback is passed to AbstractCallbackHandler.handle(Callback[]).

Default implementation throws an UnsupportedCallbackException.

Overrides:

handleCleanup in class AbstractWsPasswordCallbackHandler

Throws:

java.io.IOException

javax.security.auth.callback.UnsupportedCallbackException