ml.alternet.security.web.tomcat

Class AltProtocolHandler

java.lang.Object

ml.alternet.security.web.tomcat.AltProtocolHandler

All Implemented Interfaces:

DebugLevel.Debuggable, org.apache.coyote.ProtocolHandler

public class AltProtocolHandler
extends Object
implements org.apache.coyote.ProtocolHandler, DebugLevel.Debuggable

A protocol handler wrapper that enhance a Tomcat server for safe-processing of passwords.

This protocol handler wrapper allow to capture the passwords that would be sent by the client BEFORE they are processed as Strings ; after capturing, the raw data are replaced with '*'. The captured passwords are wrapped in an encrypted form and are available to the user by the classes of the package ml.alternet.security.web.

The configuration of the wrapped protocol handler remains the same, except for the "protocol" attribute that have to be set to this class name. Additional attributes are "tomcatProtocol" (with the replaced value of the "protocol" attribute), "passwordManager" (by default, it is the strong password manager), and "allowUnsecureTrace" (false by default).

<Connector port="8080"
             tomcatProtocol="HTTP/1.1"
             protocol="ml.alternet.security.web.tomcat.EnhancedProtocolHandler"
             passwordManager="ml.alternet.security.impl.StrongPasswordManager"
             allowUnsecureTrace="false"
             connectionTimeout="20000"
             redirectPort="8443" />
 

Author:

Philippe Poulard

Constructor Summary

Constructors

Constructor and Description
AltProtocolHandler()

Method Summary

Modifier and Type	Method and Description
void	destroy()
org.apache.coyote.Adapter	getAdapter()
DebugLevel	getDebugLevel()
Executor	getExecutor()
PasswordManager	getPasswordManager() Get the password manager.
void	init()
boolean	isAprRequired()
boolean	isCometSupported()
boolean	isCometTimeoutSupported()
boolean	isSendfileSupported()
void	pause()
void	resume()
void	setAdapter(org.apache.coyote.Adapter adapter)
void	setAllowUnsecureTrace(String value) Allow unsecure trace (false by default).
void	setPasswordManager(String passwordManager) Set a password manager from its class name.
boolean	setProperty(String name, String value) Set a configured property.
void	start()
void	stop()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AltProtocolHandler

public AltProtocolHandler()

Method Detail

getDebugLevel

public DebugLevel getDebugLevel()

Specified by:

getDebugLevel in interface DebugLevel.Debuggable

setPasswordManager

public void setPasswordManager(String passwordManager)

Set a password manager from its class name.

Parameters:

passwordManager - The name of the password manager.

See Also:

PasswordManager

getPasswordManager

public PasswordManager getPasswordManager()

Get the password manager.

Returns:

By default, the password manager use encryption.

setAllowUnsecureTrace

public void setAllowUnsecureTrace(String value)

Allow unsecure trace (false by default). DO NOT ALLOW UNSECURE TRACE IN PRODUCTION ENVIRONMENT.

Parameters:

value - true to allow unsecure trace, false to disallow unsecure trace.

setProperty

public boolean setProperty(String name,
                           String value)

Set a configured property.

Parameters:

name - The name of the property.

value - The value of the property.

Returns:

true the more often.

setAdapter

public void setAdapter(org.apache.coyote.Adapter adapter)

Specified by:

setAdapter in interface org.apache.coyote.ProtocolHandler

getAdapter

public org.apache.coyote.Adapter getAdapter()

Specified by:

getAdapter in interface org.apache.coyote.ProtocolHandler

getExecutor

public Executor getExecutor()

Specified by:

getExecutor in interface org.apache.coyote.ProtocolHandler

init

public void init()
          throws Exception

Specified by:

init in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

start

public void start()
           throws Exception

Specified by:

start in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

pause

public void pause()
           throws Exception

Specified by:

pause in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

resume

public void resume()
            throws Exception

Specified by:

resume in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

stop

public void stop()
          throws Exception

Specified by:

stop in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

destroy

public void destroy()
             throws Exception

Specified by:

destroy in interface org.apache.coyote.ProtocolHandler

Throws:

Exception

isAprRequired

public boolean isAprRequired()

Specified by:

isAprRequired in interface org.apache.coyote.ProtocolHandler

isCometSupported

public boolean isCometSupported()

Specified by:

isCometSupported in interface org.apache.coyote.ProtocolHandler

isCometTimeoutSupported

public boolean isCometTimeoutSupported()

Specified by:

isCometTimeoutSupported in interface org.apache.coyote.ProtocolHandler

isSendfileSupported

public boolean isSendfileSupported()

Specified by:

isSendfileSupported in interface org.apache.coyote.ProtocolHandler