uk.ac.ed.epcc.webapp.session.twofactor

Class TwoFactorHandler<A extends AppUser>

java.lang.Object

uk.ac.ed.epcc.webapp.session.twofactor.TwoFactorHandler<A>

public class TwoFactorHandler<A extends AppUser>
extends java.lang.Object

Handle two-factor authorisation plugins. This is only appropriate for explicit login control-flows. It is inserted at the point where the person would be set in the session. If two factor is enabled the person is remembered and the two-factor verification flow invoked instead. If we use external-auth enabled on any location we need to invoke via a required-page instead

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	AUTH_RESULT_ATTR
static java.lang.String	AUTH_TYPE_ATTR
static java.lang.String	AUTH_USER_ATTR

Constructor Summary

Constructors

Constructor and Description
TwoFactorHandler(SessionService<A> sess)

Method Summary

Modifier and Type	Method and Description
FormResult	completeTwoFactor(boolean success, A expected)
FormResult	doLogin(A user, java.lang.String type, SerializableFormResult next_page)
Logger	getLogger()
boolean	needAuth(A user) would a call to #doLogin(AppUser, SerializableFormResult) result in an authorisation request
boolean	requireTwoFactor(A user)
void	securityEvent(java.lang.String event)
void	securityEvent(java.lang.String event, java.util.Map attr)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUTH_USER_ATTR

public static final java.lang.String AUTH_USER_ATTR

See Also:

Constant Field Values

AUTH_TYPE_ATTR

public static final java.lang.String AUTH_TYPE_ATTR

See Also:

Constant Field Values

AUTH_RESULT_ATTR

public static final java.lang.String AUTH_RESULT_ATTR

See Also:

Constant Field Values

Constructor Detail

TwoFactorHandler

public TwoFactorHandler(SessionService<A> sess)

Parameters:

sess -

Method Detail

needAuth

public boolean needAuth(A user)

would a call to #doLogin(AppUser, SerializableFormResult) result in an authorisation request

Parameters:

user -

Returns:

requireTwoFactor

public boolean requireTwoFactor(A user)

doLogin

public FormResult doLogin(A user,
                          java.lang.String type,
                          SerializableFormResult next_page)

completeTwoFactor

public FormResult completeTwoFactor(boolean success,
                                    A expected)

securityEvent

public void securityEvent(java.lang.String event)

securityEvent

public void securityEvent(java.lang.String event,
                          java.util.Map attr)

getLogger

public Logger getLogger()

Returns: