Class AbstractTOTPExtractionAction

All Implemented Interfaces:
Component, DestructableComponent, InitializableComponent, ProfileAction, Aware, MessageSource, MessageSourceAware, Action
Direct Known Subclasses:
ExtractTOTPFromFormRequest, ExtractTOTPFromHeader

public abstract class AbstractTOTPExtractionAction extends AbstractAuthenticationAction
/** An action that derives a username from a lookup strategy, a TOTP code from an arbitrary source, creates a TOTPContext, and attaches it to the AuthenticationContext.
Event:
EventIds.PROCEED_EVENT_ID, AuthnEventIds.NO_CREDENTIALS, AuthnEventIds.UNKNOWN_USERNAME, AuthnEventIds.INVALID_CREDENTIALS
Precondition:
ProfileRequestContext.getSubcontext(AuthenticationContext.class) != null
Postcondition:
AuthenticationContext.getSubcontext(TOTPContext.class) != null
  • Field Details

    • log

      @Nonnull private final org.slf4j.Logger log
      Class logger.
    • usernameLookupStrategy

      @Nonnull private Function<ProfileRequestContext,String> usernameLookupStrategy
      Lookup strategy for username to use in resolving token seeds.
    • totpContextCreationStrategy

      @Nonnull private Function<AuthenticationContext,TOTPContext> totpContextCreationStrategy
      Creation strategy for TOTP context.
  • Constructor Details

    • AbstractTOTPExtractionAction

      public AbstractTOTPExtractionAction()
      Constructor.
  • Method Details