A B C D E F G H I J N O P R S T U V

A

AccessControl - Annotation Type in org.sklsft.commons.rest.security.annotations

Used to indicates a rest controller method : which AccessControlType must be considered by the AccessControlAspect which TokenExtractionMode to be used to get the tokens

AccessControlAspect - Class in org.sklsft.commons.rest.security.aspect

The aspect responsible for controlling the access to a RESTFul API
The AccessControlType is declared with the AccessControl Annotation
The access control is delegated to the @{link AccessController}

AccessControlAspect(AccessController) - Constructor for class org.sklsft.commons.rest.security.aspect.AccessControlAspect

AccessController - Class in org.sklsft.commons.rest.security.access

This class will : Extract the token with @{link TokenExtractor} Give a security context with the SecurityContextProvider

AccessController(SecurityContextProvider, SecurityContextProvider, String, String) - Constructor for class org.sklsft.commons.rest.security.access.AccessController

AccessControlType - Enum in org.sklsft.commons.rest.security.access

Different Access control types provided by annotation AccessControl PUBLIC : no control should be done ANONYMOUS : the only secretKey will be checked PRIVATE : both secretKey and token will be checked

AesJsonTokenEncoder<T> - Class in org.sklsft.commons.rest.security.tokens.encoder.impl

imlementation of a TokenEncoder that uses an AesJsonObjectEncoder

AesJsonTokenEncoder(ObjectMapper, AesKeyAccessor, Class<T>) - Constructor for class org.sklsft.commons.rest.security.tokens.encoder.impl.AesJsonTokenEncoder

B

BasicCredentials - Class in org.sklsft.commons.rest.security.credentials

BasicCredentials() - Constructor for class org.sklsft.commons.rest.security.credentials.BasicCredentials

BasicJwtBody - Class in org.sklsft.commons.rest.security.tokens.jwt

BasicJwtBody() - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

BasicRsaJsonWebToken - Class in org.sklsft.commons.rest.security.tokens.jwt

BasicRsaJsonWebToken(BasicRsaJwtHeader, BasicJwtBody) - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJsonWebToken

BasicRsaJwtHeader - Class in org.sklsft.commons.rest.security.tokens.jwt

BasicRsaJwtHeader() - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

BasicRsaJwtHeader(RsaAlgorithms, String) - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

BasicRsaJwtVerifier - Class in org.sklsft.commons.rest.security.tokens.verification.impl

BasicRsaJwtVerifier(RsaSignatureVerifier) - Constructor for class org.sklsft.commons.rest.security.tokens.verification.impl.BasicRsaJwtVerifier

BasicSecurityContextProvider<C> - Class in org.sklsft.commons.rest.security.context.impl

BasicSecurityContextProvider() - Constructor for class org.sklsft.commons.rest.security.context.impl.BasicSecurityContextProvider

bindCredentials(Object) - Static method in class org.sklsft.commons.rest.security.context.SecurityContextHolder

C

CredentialsConflictException - Exception in org.sklsft.commons.rest.security.exception

This exception is thrown if you try to bind a security context if there is already one

CredentialsConflictException(String) - Constructor for exception org.sklsft.commons.rest.security.exception.CredentialsConflictException

CredentialsConflictException(String, Throwable) - Constructor for exception org.sklsft.commons.rest.security.exception.CredentialsConflictException

CryptedTokenEncoder<T> - Class in org.sklsft.commons.rest.security.tokens.encoder.impl

imlementation of a TokenEncoder that uses an ObjectEncoder

CryptedTokenEncoder(ObjectEncoder, Class<T>) - Constructor for class org.sklsft.commons.rest.security.tokens.encoder.impl.CryptedTokenEncoder

D

decode(String) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.CryptedTokenEncoder

decode(String) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.JwtEncoder

decode(String) - Method in interface org.sklsft.commons.rest.security.tokens.encoder.TokenEncoder

E

encode(T) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.CryptedTokenEncoder

encode(JsonWebToken<H, B>) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.JwtEncoder

encode(T) - Method in interface org.sklsft.commons.rest.security.tokens.encoder.TokenEncoder

equals(Object) - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

equals(Object) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

extractFromBody(BasicJwtBody) - Method in class org.sklsft.commons.rest.security.credentials.extractor.impl.FromBasicJwtCredentialsExtractor

extractFromBody(B) - Method in class org.sklsft.commons.rest.security.credentials.extractor.impl.FromJwtCredentialsExtractor

extractToken(String) - Method in class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenFromCookieExtractor

extractToken(String) - Method in class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenFromHeaderExtractor

extractToken(String) - Method in interface org.sklsft.commons.rest.security.tokens.extraction.TokenExtractor

F

FromBasicJwtCredentialsExtractor - Class in org.sklsft.commons.rest.security.credentials.extractor.impl

FromBasicJwtCredentialsExtractor() - Constructor for class org.sklsft.commons.rest.security.credentials.extractor.impl.FromBasicJwtCredentialsExtractor

FromBasicRsaJwtSecurityContextProvider - Class in org.sklsft.commons.rest.security.context.impl

FromBasicRsaJwtSecurityContextProvider(ObjectMapper, RsaPublicKeyAccessor, SecurityCredentialsValidator<BasicCredentials>) - Constructor for class org.sklsft.commons.rest.security.context.impl.FromBasicRsaJwtSecurityContextProvider

FromCryptedTokenSecurityContextProvider<T> - Class in org.sklsft.commons.rest.security.context.impl

FromCryptedTokenSecurityContextProvider(TokenEncoder<T>, SecurityCredentialsValidator<T>) - Constructor for class org.sklsft.commons.rest.security.context.impl.FromCryptedTokenSecurityContextProvider

FromJwtCredentialsExtractor<H,B,C> - Class in org.sklsft.commons.rest.security.credentials.extractor.impl

FromJwtCredentialsExtractor() - Constructor for class org.sklsft.commons.rest.security.credentials.extractor.impl.FromJwtCredentialsExtractor

FromJwtSecurityContextProvider<H,B,C> - Class in org.sklsft.commons.rest.security.context.impl

FromJwtSecurityContextProvider(ObjectMapper, Class<H>, Class<B>, TokenVerifier<JsonWebToken<H, B>>, SecurityCredentialsExtractor<JsonWebToken<H, B>, C>, SecurityCredentialsValidator<C>) - Constructor for class org.sklsft.commons.rest.security.context.impl.FromJwtSecurityContextProvider

FromKeySecurityContextProvider<C> - Class in org.sklsft.commons.rest.security.context.impl

FromKeySecurityContextProvider(SecurityCredentialsValidator<C>) - Constructor for class org.sklsft.commons.rest.security.context.impl.FromKeySecurityContextProvider

FromSignedTokenSecurityContextProvider<T,C> - Class in org.sklsft.commons.rest.security.context.impl

Implementation of SecurityContextProvider based on the use of : a SecurityContextHolder which is based on ThreadLocal a TokenEncoder a TokenVerifier a SecurityCredentialsExtractor a SecurityCredentialsValidator

FromSignedTokenSecurityContextProvider(TokenEncoder<T>, TokenVerifier<T>, SecurityCredentialsExtractor<T, C>, SecurityCredentialsValidator<C>) - Constructor for class org.sklsft.commons.rest.security.context.impl.FromSignedTokenSecurityContextProvider

G

get(String) - Method in class org.sklsft.commons.rest.security.context.impl.FromKeySecurityContextProvider

getAlgorithm() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

getApplication() - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

getApplication() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

getBody() - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

getCredentials() - Static method in class org.sklsft.commons.rest.security.context.SecurityContextHolder

getCredentials(JsonWebToken<H, B>) - Method in class org.sklsft.commons.rest.security.credentials.extractor.impl.FromJwtCredentialsExtractor

getCredentials(T) - Method in interface org.sklsft.commons.rest.security.credentials.extractor.SecurityCredentialsExtractor

getCredentialsOrNull() - Static method in class org.sklsft.commons.rest.security.context.SecurityContextHolder

getExpiryDate() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

getHeader() - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

getPayload() - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

getPublicKeyId() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

getSignature() - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

getTokenExtractor(TokenExtractionMode) - Static method in class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenExtractorFactory

getType() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

getUser() - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

getUser() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

getValidCredentials(String) - Method in class org.sklsft.commons.rest.security.context.impl.BasicSecurityContextProvider

getValidCredentials(String) - Method in class org.sklsft.commons.rest.security.context.impl.FromCryptedTokenSecurityContextProvider

getValidCredentials(String) - Method in class org.sklsft.commons.rest.security.context.impl.FromKeySecurityContextProvider

getValidCredentials(String) - Method in class org.sklsft.commons.rest.security.context.impl.FromSignedTokenSecurityContextProvider

H

handleHandshake(ProceedingJoinPoint) - Method in class org.sklsft.commons.rest.security.aspect.AccessControlAspect

handshake(AccessControlType, TokenExtractionMode) - Method in class org.sklsft.commons.rest.security.access.AccessController

hashCode() - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

hashCode() - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

I

InvalidTokenException - Exception in org.sklsft.commons.rest.security.exception

Thrown if your token does not enable to retrieve valid credentials

InvalidTokenException(String) - Constructor for exception org.sklsft.commons.rest.security.exception.InvalidTokenException

InvalidTokenException(String, Throwable) - Constructor for exception org.sklsft.commons.rest.security.exception.InvalidTokenException

J

JsonWebToken<H,B> - Class in org.sklsft.commons.rest.security.tokens.jwt

JsonWebToken() - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

JsonWebToken(H, B) - Constructor for class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

JwtEncoder<H,B> - Class in org.sklsft.commons.rest.security.tokens.encoder.impl

JwtEncoder(ObjectMapper, Class<H>, Class<B>) - Constructor for class org.sklsft.commons.rest.security.tokens.encoder.impl.JwtEncoder

N

NoBoundCredentialsException - Exception in org.sklsft.commons.rest.security.exception

If you try to access a security context and there is no one

NoBoundCredentialsException(String) - Constructor for exception org.sklsft.commons.rest.security.exception.NoBoundCredentialsException

NoBoundCredentialsException(String, Throwable) - Constructor for exception org.sklsft.commons.rest.security.exception.NoBoundCredentialsException

O

org.sklsft.commons.rest.security.access - package org.sklsft.commons.rest.security.access

org.sklsft.commons.rest.security.annotations - package org.sklsft.commons.rest.security.annotations

org.sklsft.commons.rest.security.aspect - package org.sklsft.commons.rest.security.aspect

org.sklsft.commons.rest.security.context - package org.sklsft.commons.rest.security.context

org.sklsft.commons.rest.security.context.impl - package org.sklsft.commons.rest.security.context.impl

org.sklsft.commons.rest.security.credentials - package org.sklsft.commons.rest.security.credentials

org.sklsft.commons.rest.security.credentials.extractor - package org.sklsft.commons.rest.security.credentials.extractor

org.sklsft.commons.rest.security.credentials.extractor.impl - package org.sklsft.commons.rest.security.credentials.extractor.impl

org.sklsft.commons.rest.security.credentials.validator - package org.sklsft.commons.rest.security.credentials.validator

org.sklsft.commons.rest.security.exception - package org.sklsft.commons.rest.security.exception

org.sklsft.commons.rest.security.tokens.encoder - package org.sklsft.commons.rest.security.tokens.encoder

org.sklsft.commons.rest.security.tokens.encoder.impl - package org.sklsft.commons.rest.security.tokens.encoder.impl

org.sklsft.commons.rest.security.tokens.extraction - package org.sklsft.commons.rest.security.tokens.extraction

org.sklsft.commons.rest.security.tokens.extraction.impl - package org.sklsft.commons.rest.security.tokens.extraction.impl

org.sklsft.commons.rest.security.tokens.factory - package org.sklsft.commons.rest.security.tokens.factory

org.sklsft.commons.rest.security.tokens.jwt - package org.sklsft.commons.rest.security.tokens.jwt

org.sklsft.commons.rest.security.tokens.verification - package org.sklsft.commons.rest.security.tokens.verification

org.sklsft.commons.rest.security.tokens.verification.impl - package org.sklsft.commons.rest.security.tokens.verification.impl

P

PrivateRsaJwtEncoder<H,B> - Class in org.sklsft.commons.rest.security.tokens.encoder.impl

PrivateRsaJwtEncoder(ObjectMapper, Class<H>, Class<B>, RsaSigner, String, String) - Constructor for class org.sklsft.commons.rest.security.tokens.encoder.impl.PrivateRsaJwtEncoder

provideSecurityContext(String) - Method in class org.sklsft.commons.rest.security.context.impl.BasicSecurityContextProvider

provideSecurityContext(String) - Method in interface org.sklsft.commons.rest.security.context.SecurityContextProvider

PublicJwtDecoder<H,B> - Class in org.sklsft.commons.rest.security.tokens.encoder.impl

PublicJwtDecoder(ObjectMapper, Class<H>, Class<B>) - Constructor for class org.sklsft.commons.rest.security.tokens.encoder.impl.PublicJwtDecoder

R

RsaJsonWebTokenFactory - Class in org.sklsft.commons.rest.security.tokens.factory

RsaJsonWebTokenFactory() - Constructor for class org.sklsft.commons.rest.security.tokens.factory.RsaJsonWebTokenFactory

RsaJwtVerifier<H extends BasicRsaJwtHeader,B> - Class in org.sklsft.commons.rest.security.tokens.verification.impl

RsaJwtVerifier(RsaSignatureVerifier) - Constructor for class org.sklsft.commons.rest.security.tokens.verification.impl.RsaJwtVerifier

S

SecurityContextHolder - Class in org.sklsft.commons.rest.security.context

A security context is handled by a ThreadLocal

SecurityContextHolder() - Constructor for class org.sklsft.commons.rest.security.context.SecurityContextHolder

SecurityContextProvider - Interface in org.sklsft.commons.rest.security.context

Responsible for Providing a security context given a user token

SecurityCredentialsExtractor<T,C> - Interface in org.sklsft.commons.rest.security.credentials.extractor

Provides Credentials from the Token

SecurityCredentialsValidator<C> - Interface in org.sklsft.commons.rest.security.credentials.validator

Responsible for credentials validation.

setAlgorithm(String) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

setApplication(String) - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

setApplication(String) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

setBody(B) - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

setExpiryDate(Date) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

setHeader(H) - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

setPayload(byte[]) - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

setPublicKeyId(String) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

setSignature(byte[]) - Method in class org.sklsft.commons.rest.security.tokens.jwt.JsonWebToken

setType(String) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicRsaJwtHeader

setUser(String) - Method in class org.sklsft.commons.rest.security.credentials.BasicCredentials

setUser(String) - Method in class org.sklsft.commons.rest.security.tokens.jwt.BasicJwtBody

sign(byte[]) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.JwtEncoder

sign(byte[]) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.PrivateRsaJwtEncoder

sign(byte[]) - Method in class org.sklsft.commons.rest.security.tokens.encoder.impl.PublicJwtDecoder

T

TokenEncoder<T> - Interface in org.sklsft.commons.rest.security.tokens.encoder

used to encode/decode a Token to/from a String

TokenEncodingException - Exception in org.sklsft.commons.rest.security.exception

TokenEncodingException(String) - Constructor for exception org.sklsft.commons.rest.security.exception.TokenEncodingException

TokenEncodingException(String, Throwable) - Constructor for exception org.sklsft.commons.rest.security.exception.TokenEncodingException

TokenExtractionMode - Enum in org.sklsft.commons.rest.security.tokens.extraction

Different Token extraction modes provided by annotation AccessControl HEADER : Token are passed through header (default mode) COOKIE : Token are given by cookies (useful for images to be displayed in html)

TokenExtractor - Interface in org.sklsft.commons.rest.security.tokens.extraction

To define an interface linked with a factory TokenExtractorFactory

TokenExtractorFactory - Class in org.sklsft.commons.rest.security.tokens.extraction.impl

Chooses the correct tokens extractor depending on the TokenExtractionMode

TokenExtractorFactory() - Constructor for class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenExtractorFactory

TokenFromCookieExtractor - Class in org.sklsft.commons.rest.security.tokens.extraction.impl

To extract tokens from Servlet request cookies

TokenFromCookieExtractor(TokenFromHeaderExtractor) - Constructor for class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenFromCookieExtractor

TokenFromHeaderExtractor - Class in org.sklsft.commons.rest.security.tokens.extraction.impl

To extract tokens from Servlet request headers

TokenFromHeaderExtractor() - Constructor for class org.sklsft.commons.rest.security.tokens.extraction.impl.TokenFromHeaderExtractor

TokenNotFoundException - Exception in org.sklsft.commons.rest.security.exception

Thrown if your token does not enable to retrieve valid credentials

TokenNotFoundException(String) - Constructor for exception org.sklsft.commons.rest.security.exception.TokenNotFoundException

TokenNotFoundException(String, Throwable) - Constructor for exception org.sklsft.commons.rest.security.exception.TokenNotFoundException

TokenVerifier<T> - Interface in org.sklsft.commons.rest.security.tokens.verification

U

unbindCredentials() - Static method in class org.sklsft.commons.rest.security.context.SecurityContextHolder

V

validateCredentials(C) - Method in interface org.sklsft.commons.rest.security.credentials.validator.SecurityCredentialsValidator

valueOf(String) - Static method in enum org.sklsft.commons.rest.security.access.AccessControlType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum org.sklsft.commons.rest.security.tokens.extraction.TokenExtractionMode

Returns the enum constant of this type with the specified name.

values() - Static method in enum org.sklsft.commons.rest.security.access.AccessControlType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum org.sklsft.commons.rest.security.tokens.extraction.TokenExtractionMode

Returns an array containing the constants of this enum type, in the order they are declared.

verifyBody(BasicJwtBody) - Method in class org.sklsft.commons.rest.security.tokens.verification.impl.BasicRsaJwtVerifier

verifyBody(B) - Method in class org.sklsft.commons.rest.security.tokens.verification.impl.RsaJwtVerifier

verifyToken(JsonWebToken<H, B>) - Method in class org.sklsft.commons.rest.security.tokens.verification.impl.RsaJwtVerifier

verifyToken(T) - Method in interface org.sklsft.commons.rest.security.tokens.verification.TokenVerifier

Should be used for JWT signature verification.

A B C D E F G H I J N O P R S T U V