Namespace: OpenEdge.Security.STS
Type: Class ClientValidator
Parent Classes:
Progress.Lang.Object
OpenEdge.Security.STS.ClientValidator

Inherits: Progress.Lang.Object
Implements: OpenEdge.Logging.ISupportLogging

Copyright (c) 2016 by Progress Software Corporation. All rights reserved.
File:ClientValidator
Purpose:Validates the client-principal passed in from an STS
Author(s):pjudge
Created:Fri Feb 26 13:53:15 EST 2016
Notes:* PROVIDERS.JSON format
- may have named groups (per operation)
- groups are typically named for the ooabl type (concrete implementations better)
- groups have properties
validateClient:logical (not unknown)
sealKey:character
string
array-of-strings
"<authz operation>" : string or array-of-strings
{
"OpenEdge.Security.Provider.UserTableAuthProvider": {
"validateClient": true,
"requiredRoles": "STS_VALIDATE_USER",
"sealKey": "<prefix>::<hash>",
"passwordProvider": "Sports.Security.PWProvider"
},
"OpenEdge.Security.STS.EventDispatcher":{
"validateClient": true,
"requiredRoles": {
"EmitEvent": ["STS_EMIT_EVENT"],
"ApplyPolicy: ["STS_EMIT_EVENT"] },
"sealKey": "<prefix>::<hash>"
}
}



Method Summary
  Options Name Purpose
  LoadConfig () /* Loads configuration for this provider */
  LOGICAL Validate (character, character) /* Validates that the STS is allowed to make this call. The caller decides what to do with the result @param character The group containing the operation being authorised @param character The operation (in this class) being authorised @return logical TRUE if the client is authenticated and authorised to perform this operation FALSE otherwise */

Constructor Summary
  Options Name Purpose
  ClientValidator () /* default constructor */
  ClientValidator (JsonObject) /* constructor @param JsonObject Configuration data */

Property Summary
  Options Name Purpose
  OpenEdge.Logging.ILogWriter Logger


Method Detail
Top

LoadConfig ()

/* Loads configuration for this provider
Top

LOGICAL Validate (character, character)

/* Validates that the STS is allowed to make this call. The caller decides what to
do with the result
FALSE otherwise
Parameters:
pcGroup CHARACTER
 
pcOperation CHARACTER
 
Returns LOGICAL
  logical TRUE if the client is authenticated and authorised to perform this operation


Constructor Detail
Top

ClientValidator ()

/* default constructor
Top

ClientValidator (JsonObject)

/* constructor
Parameters:
poConfig Progress.Json.ObjectModel.JsonObject
 


Property Detail
Top

OpenEdge.Logging.ILogWriter Logger

Returns OpenEdge.Logging.ILogWriter