- get(String) - Method in class ml.alternet.security.auth.Credentials
-
Return a field value.
- get() - Method in class ml.alternet.security.impl.AbstractClearPassword
-
- get() - Method in interface ml.alternet.security.Password.Clear
-
Get a clear copy of the password ; the password remains obfuscated
until this method is invoked.
- get(int) - Method in class ml.alternet.security.web.server.BasicAuthorizationBuffer
-
Get the byte at the index specified.
- get(String) - Method in class ml.alternet.security.web.server.FormFieldConfiguration
-
Get the fields bound to a path.
- get(int, byte[], int, int) - Method in class ml.alternet.security.web.server.FormReader
-
This method is called when the ByteBuffer has to
be read for further parsing ; it is used to fill
the "buf" byte array.
- getAuthenticationMethod(ServletRequest) - Method in interface ml.alternet.security.web.server.PasswordFieldMatcher
-
Indicates whether HTTP Basic | Form authentication has to
be processed for a given request.
- getClearCopy() - Method in class ml.alternet.security.EmptyPassword
-
- getClearCopy() - Method in class ml.alternet.security.impl.AbstractClearPassword
-
Deobfuscate the underlying password.
- getClearCopy() - Method in class ml.alternet.security.impl.AbstractPassword
-
- getClearCopy() - Method in interface ml.alternet.security.Password
-
Wrap this password in a clear copy.
- getClearCopy() - Method in class ml.alternet.security.web.PasswordParam
-
- getClearValidPassword() - Method in class ml.alternet.security.impl.AbstractPassword
-
Return a new clear copy of this valid password.
- getConverter(Class<T>, Type, Annotation[]) - Method in class ml.alternet.security.web.PasswordConverterProvider
-
- getCredentials(ServletRequest) - Method in enum ml.alternet.security.web.server.AuthenticationMethod
-
Get the user credentials after authentication.
- getCurrentCaptureContext() - Method in class ml.alternet.security.web.server.FormReader
-
Hold the passwords that are extracted ; the
capture context also indicates which fields
in the form has to be captured, and hold a
reference to the incoming data source.
- getDebugLevel() - Method in interface ml.alternet.security.web.server.DebugLevel.Debuggable
-
Return the debug level of this component.
- getDefaultPasswordManager() - Static method in class ml.alternet.security.PasswordManagerFactory
-
Get the default password manager, according to the configuration, which
can be any of the supplied password manager (see other methods) or also a
custom configuration.
- getMaxFormContentSize() - Method in interface ml.alternet.security.web.server.FormLimit
-
Get the maximum content size of a form post, to protect
against DOS attacks from large forms.
- getMaxFormKeys() - Method in interface ml.alternet.security.web.server.FormLimit
-
Get the maximum size of a form post, to protect against
DOS attacks from large forms.
- getPassword() - Method in class ml.alternet.security.auth.Credentials
-
Return the password.
- getPasswords(String) - Method in class ml.alternet.security.web.Passwords
-
Return a non empty sequence of passwords.
- getPasswords(ServletRequest, String) - Static method in class ml.alternet.security.web.Passwords
-
Extract the passwords sent by the HTTP request.
- getPrivatePassword() - Method in class ml.alternet.security.impl.AbstractPassword
-
Get the private bytes of this password, used internally to unset the
bytes when the password is invalidated.
- getRealm() - Method in class ml.alternet.security.auth.Credentials
-
Return the realm.
- getStandardPasswordManager() - Static method in class ml.alternet.security.PasswordManagerFactory
-
Return the standard password manager where passwords are Base64 encoded.
- getStrongPasswordManager() - Static method in class ml.alternet.security.PasswordManagerFactory
-
Return the strong password manager where passwords are encrypted,
therefore not easy to find in the memory.
- getUserName() - Method in class ml.alternet.security.auth.Credentials
-
Return the user name.
- getWeakPasswordManager() - Static method in class ml.alternet.security.PasswordManagerFactory
-
Return the weak password manager where passwords are kept clear ; a weak
password manager is suitable for example when a password is already clear
in the system, such as a database password which has been read from a
configuration file aside the system, which therefore already appears
clear.
- Password - Interface in ml.alternet.security
-
A safe password, stored obfuscate.
- Password.Clear - Interface in ml.alternet.security
-
This class helps keeping low the period where a password appear in clear
in the memory, in order to make it difficult to find when a memory dump
is performed.
- PasswordConverterProvider - Class in ml.alternet.security.web
-
JAX-RS provider that converts a form parameter or a header parameter to
a secure password (query parameter are not handled by this
converter since it would be a security flaw to send a password
in the URI).
- PasswordConverterProvider() - Constructor for class ml.alternet.security.web.PasswordConverterProvider
-
- PasswordFieldMatcher - Interface in ml.alternet.security.web.server
-
According to the Web application configuration,
determine whether an incoming HTTP request contains
passwords to capture.
- PasswordManager - Interface in ml.alternet.security
-
A concrete implementation should supply obfuscate Passwords according to the
level of security expected.
- PasswordManagerFactory - Class in ml.alternet.security
-
A factory that can supply different flavors of PasswordManager.
- PasswordManagerFactory() - Constructor for class ml.alternet.security.PasswordManagerFactory
-
- PasswordParam - Class in ml.alternet.security.web
-
Represent a non empty sequence of passwords.
- PasswordParam(Iterator<Password>) - Constructor for class ml.alternet.security.web.PasswordParam
-
Create a sequence of passwords.
- PasswordParam(Password) - Constructor for class ml.alternet.security.web.PasswordParam
-
Convenient constructor for a sequence of a single password.
- PasswordParam() - Constructor for class ml.alternet.security.web.PasswordParam
-
Convenient constructor for a sequence representing the
empty password.
- Passwords - Class in ml.alternet.security.web
-
Handle safe passwords on a Web environment, meaning that in the
Web processing chain, a password NEVER appear as a String inside
the system.
- Passwords() - Constructor for class ml.alternet.security.web.Passwords
-
- PasswordState - Enum in ml.alternet.security
-
Indicates whether a password is empty, valid, or invalid.
- processQueryParam(QueryParam) - Method in class ml.alternet.security.web.PasswordConverterProvider
-
This method is called during annotation processing when a password
field is annotated with @QueryParam, and throws
a security exception.