org.imixs.microservice.security.auth

Class DefaultAuthenticator

java.lang.Object

org.imixs.microservice.security.auth.DefaultAuthenticator

@RequestScoped
public class DefaultAuthenticator
extends Object

This is the default Imixs-Microservice Authenticator used by the Imixs-Microservice API for a inter serivce communication. This Authenitcator is used by the imixs-registry to access an Imixs-Microservice and also by the Imixs-Microserivce to access the Imixs-Registry.

The DefaultAuthenticator supports the following authentication methods:

• BASIC
• FORM
• JWT
• CUSTOM

Depending on the auth method (BASIC,FORM,JWT) the corresponding authenticator filter is chosen per default. The properties secret and userid can be used to set password and userid.

• IMIXS_REGISTRY_AUTH_SECRET
• IMIXS_REGISTRY_AUTH_USERID

In case the property 'imixs.auth.propagation' is set to true and an authentication header is part of the current request, then the authentication header is propagated to the following service call.

In case the auth method is not defined or set to 'CUSTOM' no default filter is chosen. In this case a custom implementation of an authenticator can observe the CDI Event 'org.imixs.microservice.core.auth.AuthEvent' to register a custom filter.

Version:

1.0

Author:

rsoika

Constructor Summary

Constructors

Constructor and Description
DefaultAuthenticator()

Method Summary

Modifier and Type	Method and Description
void	registerRequestFilter(AuthEvent authEvent) This method registers the default JWT auth module.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthenticator

public DefaultAuthenticator()

Method Detail

registerRequestFilter

public void registerRequestFilter(@Observes
                                  AuthEvent authEvent)
                           throws AuthException

This method registers the default JWT auth module.

The method creates a JWT based on a given secret with the userid='imixs-microservice'

Parameters:

authEvent - - providing a melman rest client instance

Throws:

org.imixs.jwt.JWTException

AuthException