org.jenkinsci.plugins.oic

Class OicSecurityRealm

java.lang.Object

hudson.model.AbstractDescribableImpl<hudson.security.SecurityRealm>

hudson.security.SecurityRealm

org.jenkinsci.plugins.oic.OicSecurityRealm

All Implemented Interfaces:

hudson.ExtensionPoint, hudson.model.Describable<hudson.security.SecurityRealm>

public class OicSecurityRealm
extends hudson.security.SecurityRealm

Login with OpenID Connect / OAuth 2

Author:

Michael Bischoff

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	OicSecurityRealm.DescriptorImpl

Nested classes/interfaces inherited from class hudson.security.SecurityRealm

hudson.security.SecurityRealm.SecurityComponents

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

hudson.ExtensionPoint.LegacyInstancesAreScopedToHudson

Field Summary

Fields inherited from class hudson.security.SecurityRealm

AUTHENTICATED_AUTHORITY, LIST, NO_AUTHENTICATION

Constructor Summary

Constructors

Constructor and Description
OicSecurityRealm(String clientId, String clientSecret, String tokenServerUrl, String authorizationServerUrl, String userInfoServerUrl, String userNameField, String tokenFieldToCheckKey, String tokenFieldToCheckValue, String fullNameFieldName, String emailFieldName, String scopes, boolean disableSslVerification)

Method Summary

Modifier and Type	Method and Description
hudson.security.SecurityRealm.SecurityComponents	createSecurityComponents()
org.kohsuke.stapler.HttpResponse	doCommenceLogin(String from, String referer) handles the the securityRealm/commenceLogin resource
org.kohsuke.stapler.HttpResponse	doFinishLogin(org.kohsuke.stapler.StaplerRequest request) This is where the user comes back to at the end of the OpenID redirect ping-pong.
String	getAuthorizationServerUrl()
String	getClientId()
hudson.util.Secret	getClientSecret()
String	getEmailFieldName()
String	getFullNameFieldName()
String	getLoginUrl() Login begins with our doCommenceLogin(String,String) method.
String	getScopes()
String	getTokenFieldToCheckKey()
String	getTokenFieldToCheckValue()
String	getTokenServerUrl()
String	getUserInfoServerUrl()
String	getUserNameField()
boolean	isDisableSslVerification()

Methods inherited from class hudson.security.SecurityRealm

all, allowsSignup, canLogOut, commenceSignup, createCliAuthenticator, createFilter, doCaptcha, doLogout, findBean, getAuthenticationGatewayUrl, getCaptchaSupport, getCaptchaSupportDescriptors, getDescriptor, getGroupIdStrategy, getPostLogOutUrl, getSecurityComponents, getUserIdStrategy, loadGroupByGroupname, loadGroupByGroupname, loadUserByUsername, setCaptchaSupport, validateCaptcha

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OicSecurityRealm

@DataBoundConstructor
public OicSecurityRealm(String clientId,
                                              String clientSecret,
                                              String tokenServerUrl,
                                              String authorizationServerUrl,
                                              String userInfoServerUrl,
                                              String userNameField,
                                              String tokenFieldToCheckKey,
                                              String tokenFieldToCheckValue,
                                              String fullNameFieldName,
                                              String emailFieldName,
                                              String scopes,
                                              boolean disableSslVerification)
                                       throws IOException

Throws:

IOException

Method Detail

getClientId

public String getClientId()

getClientSecret

public hudson.util.Secret getClientSecret()

getTokenServerUrl

public String getTokenServerUrl()

getAuthorizationServerUrl

public String getAuthorizationServerUrl()

getUserInfoServerUrl

public String getUserInfoServerUrl()

getUserNameField

public String getUserNameField()

getTokenFieldToCheckKey

public String getTokenFieldToCheckKey()

getTokenFieldToCheckValue

public String getTokenFieldToCheckValue()

getFullNameFieldName

public String getFullNameFieldName()

getEmailFieldName

public String getEmailFieldName()

getScopes

public String getScopes()

isDisableSslVerification

public boolean isDisableSslVerification()

getLoginUrl

public String getLoginUrl()

Login begins with our doCommenceLogin(String,String) method.

Overrides:

getLoginUrl in class hudson.security.SecurityRealm

createSecurityComponents

public hudson.security.SecurityRealm.SecurityComponents createSecurityComponents()

Specified by:

createSecurityComponents in class hudson.security.SecurityRealm

doCommenceLogin

public org.kohsuke.stapler.HttpResponse doCommenceLogin(@QueryParameter
                                                        String from,
                                                        @Header(value="Referer")
                                                        String referer)
                                                 throws IOException

handles the the securityRealm/commenceLogin resource

Throws:

IOException

doFinishLogin

public org.kohsuke.stapler.HttpResponse doFinishLogin(org.kohsuke.stapler.StaplerRequest request)
                                               throws IOException

This is where the user comes back to at the end of the OpenID redirect ping-pong.

Throws:

IOException