com.atlassian.bamboo.user.authentication

Class BambooElevatedSecurityGuard

java.lang.Object

com.atlassian.bamboo.user.authentication.BambooElevatedSecurityGuard

All Implemented Interfaces:

com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard, com.atlassian.seraph.Initable

public class BambooElevatedSecurityGuard
extends Object
implements com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

The Bamboo implementation of the ElevatedSecurityGuard interface. Its elevated security is based on CAPTCHA.

NOTE : This class is instantiated by Seraph at servlet context initialisation time hence it cant have its dependencies injected.

Constructor Summary

Constructors

Constructor and Description
BambooElevatedSecurityGuard()

Method Summary

Modifier and Type	Method and Description
void	init(Map<String,String> params, com.atlassian.seraph.config.SecurityConfig config)
static boolean	isAuthCounterUpdateFailed(javax.servlet.ServletRequest request)
static boolean	isElevatedSecurityFailed(javax.servlet.ServletRequest request)
static boolean	isElevatedSecurityRequired(javax.servlet.ServletRequest request)
void	onFailedLoginAttempt(javax.servlet.http.HttpServletRequest httpServletRequest, String userName)
void	onSuccessfulLoginAttempt(javax.servlet.http.HttpServletRequest httpServletRequest, String userName)
boolean	performElevatedSecurityCheck(javax.servlet.http.HttpServletRequest httpServletRequest, String userName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BambooElevatedSecurityGuard

public BambooElevatedSecurityGuard()

Method Detail

performElevatedSecurityCheck

public boolean performElevatedSecurityCheck(javax.servlet.http.HttpServletRequest httpServletRequest,
                                            String userName)

Specified by:

performElevatedSecurityCheck in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

onFailedLoginAttempt

public void onFailedLoginAttempt(javax.servlet.http.HttpServletRequest httpServletRequest,
                                 String userName)

Specified by:

onFailedLoginAttempt in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

onSuccessfulLoginAttempt

public void onSuccessfulLoginAttempt(javax.servlet.http.HttpServletRequest httpServletRequest,
                                     String userName)

Specified by:

onSuccessfulLoginAttempt in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

init

public void init(Map<String,String> params,
                 com.atlassian.seraph.config.SecurityConfig config)

Specified by:

init in interface com.atlassian.seraph.Initable

isElevatedSecurityRequired

public static boolean isElevatedSecurityRequired(javax.servlet.ServletRequest request)

isElevatedSecurityFailed

public static boolean isElevatedSecurityFailed(javax.servlet.ServletRequest request)

isAuthCounterUpdateFailed

public static boolean isAuthCounterUpdateFailed(javax.servlet.ServletRequest request)