version 1.4, 2002/03/21 22:11:15
|
version 1.19.8.4, 2014/04/28 00:29:12
|
|
|
//%///////////////////////////////////////////////////////////////////////////// |
//%LICENSE//////////////////////////////////////////////////////////////// |
// | // |
// Copyright (c) 2000, 2001 BMC Software, Hewlett-Packard Company, IBM, |
// Licensed to The Open Group (TOG) under one or more contributor license |
// The Open Group, Tivoli Systems |
// agreements. Refer to the OpenPegasusNOTICE.txt file distributed with |
|
// this work for additional information regarding copyright ownership. |
|
// Each contributor licenses this file to you under the OpenPegasus Open |
|
// Source License; you may not use this file except in compliance with the |
|
// License. |
// | // |
// Permission is hereby granted, free of charge, to any person obtaining a | // Permission is hereby granted, free of charge, to any person obtaining a |
// copy of this software and associated documentation files (the "Software"), | // copy of this software and associated documentation files (the "Software"), |
|
|
// and/or sell copies of the Software, and to permit persons to whom the | // and/or sell copies of the Software, and to permit persons to whom the |
// Software is furnished to do so, subject to the following conditions: | // Software is furnished to do so, subject to the following conditions: |
// | // |
// The above copyright notice and this permission notice shall be included in |
// The above copyright notice and this permission notice shall be included |
// all copies of substantial portions of this software. |
// in all copies or substantial portions of the Software. |
// |
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR |
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, |
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL |
|
// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER |
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING |
|
// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER |
|
// DEALINGS IN THE SOFTWARE. |
|
// | // |
//============================================================================== |
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS |
|
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF |
|
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. |
|
// IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY |
|
// CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, |
|
// TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE |
|
// SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. |
// | // |
// Author: Nag Boranna, Hewlett-Packard Company(nagaraja_boranna@hp.com) |
////////////////////////////////////////////////////////////////////////// |
// |
|
// Modified By: |
|
// | // |
//%///////////////////////////////////////////////////////////////////////////// | //%///////////////////////////////////////////////////////////////////////////// |
| |
|
|
#include <Pegasus/Common/Config.h> | #include <Pegasus/Common/Config.h> |
| |
#include "Authenticator.h" | #include "Authenticator.h" |
#include "Linkage.h" |
|
| |
|
#include <Pegasus/Security/Authentication/Linkage.h> |
| |
PEGASUS_NAMESPACE_BEGIN | PEGASUS_NAMESPACE_BEGIN |
| |
|
|
@param authHeader String containing the Authorization header | @param authHeader String containing the Authorization header |
@param authInfo Reference to AuthenticationInfo object that holds the | @param authInfo Reference to AuthenticationInfo object that holds the |
authentication information for the given connection. | authentication information for the given connection. |
@return true on successful authentication, false otherwise |
@return AuthenticationStatus holding http status code and error detail |
*/ | */ |
Boolean performHttpAuthentication( |
AuthenticationStatus performHttpAuthentication( |
const String& authHeader, | const String& authHeader, |
AuthenticationInfo* authInfo); | AuthenticationInfo* authInfo); |
| |
|
|
@param authHeader String containing the Authorization header | @param authHeader String containing the Authorization header |
@param authInfo Reference to AuthenticationInfo object that holds the | @param authInfo Reference to AuthenticationInfo object that holds the |
authentication information for the given connection. | authentication information for the given connection. |
@return true on successful authentication, false otherwise |
@return AuthenticationStatus holding http status code and error detail |
*/ | */ |
Boolean performPegasusAuthentication( |
AuthenticationStatus performPegasusAuthentication( |
const String& authHeader, | const String& authHeader, |
AuthenticationInfo* authInfo); | AuthenticationInfo* authInfo); |
| |
|
/** Validates whether the user is a valid user for requests |
|
from HTTP connections. |
|
@param userName name of the user |
|
@param authInfo Reference to AuthenticationInfo object that holds the |
|
authentication information for the given connection. |
|
@return AuthenticationStatus holding http status code and error detail |
|
*/ |
|
AuthenticationStatus validateUserForHttpAuth( |
|
const String& userName, |
|
AuthenticationInfo* authInfo); |
|
|
/** Constructs the Pegasus Local authentication challenge header. | /** Constructs the Pegasus Local authentication challenge header. |
@param authHeader String containing the Authorization header | @param authHeader String containing the Authorization header |
@param authInfo reference to AuthenticationInfo object that holds the | @param authInfo reference to AuthenticationInfo object that holds the |
|
|
*/ | */ |
String getHttpAuthResponseHeader(); | String getHttpAuthResponseHeader(); |
| |
private: |
static Boolean isRemotePrivilegedUserAccessAllowed( String & userName); |
|
|
Boolean _parseLocalAuthHeader( |
|
const String& authHeader, |
|
String& authType, |
|
String& userName, |
|
String& cookie); |
|
| |
Boolean _parseHttpAuthHeader( |
private: |
const String& authHeader, |
|
String& authType, |
|
String& cookie); |
|
| |
Authenticator* _getLocalAuthHandler(); | Authenticator* _getLocalAuthHandler(); |
| |