public class GoogleOAuth2SecurityRealm
extends hudson.security.SecurityRealm
Modifier and Type | Class and Description |
---|---|
static class |
GoogleOAuth2SecurityRealm.DescriptorImpl |
Constructor and Description |
---|
GoogleOAuth2SecurityRealm(String clientId,
String clientSecret,
String domain) |
Modifier and Type | Method and Description |
---|---|
hudson.security.SecurityRealm.SecurityComponents |
createSecurityComponents()
Acegi has this notion that first an
Authentication object is created
by collecting user information and then the act of authentication is done
later (by AuthenticationManager ) to verify it. |
org.kohsuke.stapler.HttpResponse |
doCommenceLogin(org.kohsuke.stapler.StaplerRequest request,
String from,
String referer)
The login process starts from here.
|
org.kohsuke.stapler.HttpResponse |
doFinishLogin(org.kohsuke.stapler.StaplerRequest request)
This is where the user comes back to at the end of the OpenID redirect ping-pong.
|
String |
getClientId() |
hudson.util.Secret |
getClientSecret() |
String |
getDomain() |
String |
getLoginUrl()
Login begins with our
doCommenceLogin(StaplerRequest, String,String) method. |
protected String |
getPostLogOutUrl(org.kohsuke.stapler.StaplerRequest req,
org.acegisecurity.Authentication auth) |
all, allowsSignup, canLogOut, commenceSignup, createCliAuthenticator, createFilter, doCaptcha, doLogout, findBean, getAuthenticationGatewayUrl, getCaptchaSupport, getCaptchaSupportDescriptors, getDescriptor, getFrom, getGroupIdStrategy, getSecurityComponents, getUserIdStrategy, loadGroupByGroupname, loadGroupByGroupname, loadUserByUsername, setCaptchaSupport, validateCaptcha
@DataBoundConstructor public GoogleOAuth2SecurityRealm(String clientId, String clientSecret, String domain) throws IOException
IOException
public String getClientId()
public hudson.util.Secret getClientSecret()
public String getDomain()
public String getLoginUrl()
doCommenceLogin(StaplerRequest, String,String)
method.getLoginUrl
in class hudson.security.SecurityRealm
public hudson.security.SecurityRealm.SecurityComponents createSecurityComponents()
Authentication
object is created
by collecting user information and then the act of authentication is done
later (by AuthenticationManager
) to verify it. But in case of OpenID,
we create an Authentication
only after we verified the user identity,
so AuthenticationManager
becomes no-op.createSecurityComponents
in class hudson.security.SecurityRealm
protected String getPostLogOutUrl(org.kohsuke.stapler.StaplerRequest req, org.acegisecurity.Authentication auth)
getPostLogOutUrl
in class hudson.security.SecurityRealm
@Restricted(value=org.kohsuke.accmod.restrictions.DoNotUse.class) public org.kohsuke.stapler.HttpResponse doCommenceLogin(org.kohsuke.stapler.StaplerRequest request, @QueryParameter String from, @Header(value="Referer") String referer) throws IOException
IOException
@Restricted(value=org.kohsuke.accmod.restrictions.DoNotUse.class) public org.kohsuke.stapler.HttpResponse doFinishLogin(org.kohsuke.stapler.StaplerRequest request) throws IOException
IOException
Copyright © 2016–2018. All rights reserved.