AbstractBatchFinder.processBatchFind(long, java.util.Collection, Class)
which performs the hibernate version specific
search.Attributes
interface.DirectoryInstanceLoader
which provides a default implementation
of AbstractDirectoryInstanceLoader.getDirectory(Directory)
MembershipSearchStrategy
which searches across multiple directories in memory for users and groupsInternalDirectory
and CachingDirectory
.Directory.isActive()
instead. Since 3.4.0.Application.isActive()
instead. Since 3.4.0.LDAPQueryTranslaterImpl
that can translate Active Directory
enabled/disabled user queries.LDAPUserAttributesMapper
for Active Directory.UserContextMapper
for Active Directory.AuthenticationContext
directoryId
param.directoryId
param.DirectoryManager.addUserToGroup(long, String, String)
.SupportInformationBuilder.attributes(String, Map)
instead. Since 3.4.Directory
into the local database.SupportInformationBuilder.field(String, Object)
instead. Since 3.4.group
to the directory store.group
to the directory store.directoryId
.group
to the Crowd server.directoryId
.SupportInformationService
.userName
to the group identified by groupName
.OperationType
to an Application+Directory mapping.Property.SERVER_TRUST_RESTRICTION_TYPE
is set to)
which can be configured by the administrator of the crowd-id server.userName
to the list of all users in the system.EntityQuery.ALL_RESULTS
,
overflow and prevents negative values.user
to the directory store.CrowdService.addUser(UserWithAttributes, String)
instead. Since v2.9user
to the directory store.UserWithAttributes
to the directory specified by the passed in directoryId
.directoryId
.factorName
to the message
.#ALL_RESULTS
with Long.MAX_VALUE
}.EntityQuery.ALL_RESULTS
with Long.MAX_VALUE
}.ApplicationAlreadyExistsException
to a Response
.ApplicationAuthenticationContext
is used to authenticate Applications.ApplicationAuthenticationContext
is used by authenticating
applications
.Application
user is logging into.Application
.Application
is a concrete class.Application
or ImmutableApplication
instead. Since v2.12.ApplicationLinkService
ApplicationManagerException
to a Response
.Application
ApplicationStartedEvent
and
XMLRestoreFinishedEvent
and notifies lifecycle manager.Application
ApplicationSamlConfigurationEntity
DefaultSchemaLdifExtractor
makes assumptions about java.class.path
.AssociationCache.nextId()
).Association
objects as maps of String to Strings.BackupScheduler
Profile
which is sent over to an
open id client.PasswordScore.getRanking()
.DirContextAdapter
to a set of string values.RemoteDirectory
that creates events in the audit log upon changes.AuditLogQuery
.AuditLogAuthor
.AuditLogContext
that allows to obtain the current state in the contextAuditLogQuery
into a HQLQuery
, that can later be executed.DelegatedAuthenticationDirectory.ATTRIBUTE_CREATE_USER_ON_AUTH
is enabled, the user's details
will be added to the internal directory.
If the user exists in the internal directory and
DelegatedAuthenticationDirectory.ATTRIBUTE_UPDATE_USER_ON_AUTH
is enabled, the user's details
will be updated in the internal directory.
If the user exists in the internal directory and
DelegatedAuthenticationDirectory.ATTRIBUTE_UPDATE_USER_ON_AUTH
is enabled and
the username was changed in remote directory, the user's name
will be updated in the internal directory.
A user marked as inactive locally will not be authenticated, retrieved,
renamed or updated from the LDAP server.user
with the directory store.user
with the given credential.AuthenticationManager.authenticate(Authentication)
(org.springframework.security.Authentication)}.AuthenticatedResourceFilter
HttpServletRequest
.HttpServletRequest
.username
and password
.AuthenticationMethod
).CacheAwareCrowdHttpAuthenticator
calls when it want's to ensure a user exists in the cache.JpegPhotoContextMapper
; assume for now that all avatars are stored as
JPEG files.AzureAdDirectory
for use at runtime by the Crowd security server.AzureAdRestClient
and all of its dependencies, using the given Azure application data.AbstractTypeDescriptor
which maps Java Boolean
values to String
values containing either
"true"
or "false"
.SpringObjectFactory
that is aware that Crowd's ApplicationContext
can change after bootstrapping.ContextLoaderListener
for the main Spring context.ValidationRule
with the supplied value functions and their corresponding predicates, all of
which must be positively tested to generate aa error
application
.BatchProcessor
to a list of audit log changesets, to be persisted to generate an audit trail for the operation.CacheFactory
(and also a CacheManager
) backed by Ehcache.SOAPGroup
instance.DefaultDarkFeatureManager.canManageFeaturesForAllUsers()
with
an implementation that doesn't rely on the *UserKey APIs in the SAL UserManager, which aren't available in Crowd.givenType
is assignable from any of the types
ValidationError
ClusterLock
ClusterMessageService
.ClusterService
DbCachingRemoteDirectoryInstanceLoader
which allows DB caching to be switched off based
on the DirectoryProperties.CACHE_ENABLED
attribute.HibernateConfig
Some other configuration is done through HibernateEventListenersIntegrator
Connection
to the
applicationDelegatingConnectionProvider
DefaultDatabaseConnectionParameters
for JDBC
connectionsRestCrowdClient
throws an OperationFailedException if the RestCrowdClient is not
communicating with a valid Crowd REST service.RestCrowdClient
throws an InvalidAuthenticationException if the application password
is invalid.CacheManager
s after
the Id of the application context in which they are instantiated.ContextMapperWithRequiredAttributes
for cases where
a mapper requires core attributes and also the attributes for any attached
custom AttributeMapper
s.ContextMapper
for LDAP DirContextAdapter
s that declares which attributes it requires.SearchRestriction
.validationFactors
.validationFactors
.ExpirableUserToken
for a given username in the given directory.null
.ConsumerManager
instantiation is important.query
from a MembershipQuery
.MembershipSearchStrategy
for the specified isMembershipAggregationEnabled
and
associated directories
.CrowdAcceptanceTestCase
with an email server.AuthenticationController
web.xml
url-pattern
.AuthenticationListener
StrutsPrepareFilter
to get its state from
BootstrapLoaderListener
and installs a DefaultConfiguration
.crowd.cfg.xml
and place this into Crowd XML export/import.CriteriaBatchedInClauseHelperBuilder
.SQLServerIntlDialect
.SQLServerIntlDialect
SQLServerIntlDialect
.DarkFeatureManager
that doesn't depend on the
UserKey
-flavoured methods in UserManager
.CrowdException
is the superclass of Crowd-specific exceptions
that must be caught.activateOptions()
is called.InternalHostApplication
for CrowdCrowdClient
to talk to a Crowd server.HttpContext
.PluginPropertyManager
the state of Crowd's pluginscrowd.properties
and place this into Crowd XML export/importCrowdRememberMeToken
InternalCrowdRememberMeToken
CrowdRuntimeException
is the superclass of Crowd-specific exceptions that may be thrown but not
necessarily caught.null
as its
detail message.web.xml
url-pattern
.AuthenticationException
with the specified
message and root cause.AuthenticationException
with the specified
message and no root cause.WebFragmentHelper
WebTestCase
.SynchronisationStatusManager
insteadInstanceFactory
to create a RemoteDirectory.DateTimeFormatter
pattern with the timezone set to UTC.DbCachingRemoteDirectory
.RemoteDirectory
that provides LDAP and Crowd integration plus local storage in an internal directory
for LDAP user and group attributes, and local groups for LDAP and Crowd users with local caching of remote data.RequiresDataCenterLicense
PropertySet
.AbstractDatabaseConnectionDecorator.getConnectionParameters()
, to note it will not override the parameters already present in the connection url<decorator>
plugin module.AdalAuthenticationContextFactory
.AzureAdRestClientFactory
BackupFileStore
.BackupManager
ExpirableUserTokenService
backed by a storage DAO.HttpClientProvider
that creates http clients with client-side caching support.InviteUserTokenService
backed by a storage DAO.SearchStrategyFactory
which will delegate to the DirectoryManager
for all of its
search strategies
.RemoteDirectory
provides delegated
authentication to an underlying remote LDAP implementation.DelegatedDirectoryTest
to cover LDAP
directories with nested groups.DelegatedDirectoryTest
to cover LDAP
directories with nested groups.MultiEventPublisher
that delegates to an underlying EventPublisher
Directory
DirectoryEntity
.RestTestFixture
Directory
going via the DirectoryManager
.ImmutableDirectory
instead. Since 3.6.0DirectoryInfo
RemoteDirectory
for use at runtime
by the Crowd security server.RemoteDirectory
implementation can not be loaded
by a Directory
.DirectoryImpl
ApplicationDirectoryMapping
instead. Since 2.12.Iterable
view of the memberships of a collection of named groups, backed
with individual calls to a RemoteDirectory
.SynchronisableDirectory
get their monitors added, updated and removed
automatically.DirectoryMonitorRefresherJob
when the application is first started, restored, or when the
directory configuration changesDirectoryObject
instances.RemoteDirectory
does not have the
permission set to perform an operation such as add/modify/delete verses a
group/principal/role.Directory
.RuleBuilder
specifically for Directory related ValidationRule
RemoteDirectorySynchronisationFinishedEvent
.DirectorySynchronisationInformationStoreImpl
which is backed by a concurrent map.com.atlassian.crowd.model.directory.DirectorySynchronisationStatus
SynchronisableDirectory
with a cache.SynchronisableDirectory
's cache.DirectorySynchroniserHelper
that requests a SynchronisableDirectory
synchronises its cache, and
stores synchronisation information in the Directory
's attributes.DirectorySynchroniser
.UserCapabilities
.Directory
implementationsValidator
instancesEmptyStringUserType
from the atlassian-hibernate-extras
library.password
paramLdapShaPasswordEncoder.encodePassword(java.lang.String, java.lang.Object)
, but if the passed in salt is null
Crowd will use the propertyManager to find the salt used for Token's and pass that along to the underlying implementationPasswordCredential
's credential through untouched, but throws an
exception for every already-encrypted (i.e.AttributesMatcher.entityWithAttributes()
but its argument is used to set the matcher type.CrowdMatchers.entityWithAttributes()
but
its argument is used to set the matcher type.Group
interface.User
interface.Group
interface.IsEqualIgnoringWhiteSpace
and also ignore no-break space.EventStore
implementation that uses main memory as a
backing store.AuditLogContext
AuditLogAuthor
batchSize
.HttpServletRequest
NameClassPairCallbackHandler
counts the executions and provides information about the search result's name
and attributes, if the NameClassPair
was a SearchResult
.ExpirableUserToken
ExpirableUserTokenDao
UserConstants.REQUIRES_PASSWORD_CHANGE
attribute to true for
all users in the directory using bulk operationsUserConstants.REQUIRES_PASSWORD_CHANGE
attribute to true for
all users in the directorySAMLTrustEntity
.DirectoryDao.search(EntityQuery)
instead. Since v3.2.0List<Directory>
ordered by the order specified by the application.DirectoryManager.searchDirectories(EntityQuery)
instead. Since v3.2.0DirectoryNotFoundException
if it cannot be found.DirectoryNotFoundException
if it cannot be found.RemoteDirectory
's contract.Directory
based on the given directoryId
directoryId
.directoryId
.Directory
based on the given name
name
.group
that matches the supplied name
.directoryId
..group
that matches the supplied name
.directoryId
..directoryId
externalId
.directoryId
.user
that matches the supplied name
.directoryId
..directoryId
.user
that matches the supplied name
.directoryId
..urlTemplate
with variableValues
.ResourceLocator
to source the whitelist URL.BackupManager.backup(String, boolean)
.Token
as its Token.identifierHash
.Token
as its Token.randomHash
.Token
based on the passed in parameters.GenericEnumUserType
from the atlassian-hibernate-extras
library.ValidationFactor
's
against one (if it exists) in the datastore.InternalEntity.getName()
on its argument, which must not be null.application
, retrieve all active directories associated with it.application
, retrieve all active directories associated with it.groupName
belongs to, or null if there aren't any.userName
belongs to, or null if they don't belong to any.HttpSession
, or null if no application name was found.HttpSession
, or null
if there is noneHttpSession
, or null if no username was found.AuditLogChangeset.getAuthor()
#} instead. Since 3.2.0.AuditLogChangeset.getAuthor()
#} instead. Since 3.2.0.AuditLogChangeset.getAuthor()
#} instead. Since 3.2.0.BooleanRestriction.getRestrictions()
to determine if an item should be included in a search result.crowd-ehcache.xml
configuration file.crowd-ehcache.xml
configuration file.new users
.new users
.HttpClient
instance with the provided connection manager and request configuration.properties
associated
with that LDAP connector.RemoteDirectory
implementation class for a specific (already saved)
Directory
configuration.directoryId
of the directory store.user
originated, -1 if the token is for an
application
.Application.getApplicationDirectoryMapping(long)
instead. Since 2.12.Application.getApplicationDirectoryMappings()
instead. Since 2.12.SynchronisationStatusManager.getDirectorySynchronisationInformation(long)
insteadPropertyManager.getCookieConfiguration()
instead. Since v3.0.SecurityServer.getCookieInfo(com.atlassian.crowd.integration.authentication.AuthenticatedToken)
InvalidGroupException
and converts it into a directory-agnostic embedded/application group.AuditLogChangeset.getEntities()
insteadAuditLogChangeset.getEntities()
insteadMembershipQuery.getEntityNamesToMatch()
instead. Since v2.9AuditLogChangeset.getEntities()
insteadUpgradeTask.doUpgrade()
instead. Upgrade tasks are singleton beans, so most hold the
error list across multiple imports.null
for directories which do not support external idsgroup
that matches the supplied name
.CachingGroupMembershipManager.getMembers(String)
} for similar logic.groupName
, returns a SOAPGroup
that represents the group.CrowdClient.getNamesOfParentGroupsForGroup(String, int, int)
retrieves the correct parent
group names.CrowdClient.getNamesOfParentGroupsForGroup(String, int, int)
with an invalid start index will
throw an OperationFailedException.CrowdClient.getNamesOfParentGroupsForGroup(String, int, int)
for a non-existent group returns an empty list.group
that matches the supplied name
.CloseableHttpClient
instance configured with the given ClientProperties
.NestedGroupsProvider.getDirectlyRelatedGroups(String, int)
.Attributes
.CachingGroupManager.getGroup(String)
for very similar logic.groupName
, sorted naturally.RestCrowdClient.getMemberships()
returns successfully.CrowdClient.getParentGroupsForNestedGroup(String, int, int)
returns the correct nested
group memberships for a group.CrowdClient.getParentGroupsForNestedGroup(String, int, int)
returns an empty list for a
non-existent group.CrowdClient.getGroupsForNestedUser(String, int, int)
returns the correct nested
group memberships for a user.CrowdClient.getGroupsForNestedUser(String, int, int)
returns an empty list for a
non-existent username.CrowdClient.getNestedChildGroupsOfGroup(String, int, int)
returns the nested group members
of group.CrowdClient.getNestedChildGroupsOfGroup(String, int, int)
returns an empty list for a
non-existent group.CrowdClient.getNamesOfParentGroupsForNestedGroup(String, int, int)
returns the correct nested
group name memberships of a group.CrowdClient.getNamesOfParentGroupsForNestedGroup(String, int, int)
returns an empty list for
a non-existent group.CrowdClient.getNamesOfGroupsForNestedUser(String, int, int)
returns the correct group
names for a nested user memberCrowdClient.getNamesOfGroupsForNestedUser(String, int, int)
returns an empty list
for a non-existent username.CrowdClient.getNamesOfNestedChildGroupsOfGroup(String, int, int)
returns the group names of
nested group members.CrowdClient.getNamesOfNestedChildGroupsOfGroup(String, int, int)
returns an empty list for a
non-existent group.CrowdClient.getNamesOfNestedUsersOfGroup(String, int, int)
returns the correct user names
of nested members of a group.CrowdClient.getNamesOfNestedUsersOfGroup(String, int, int)
returns an empty list for a
non-existent group.eventToken
was generated.eventToken
was generated.eventToken
was generated.eventToken
was generated.User
into LDAP attributes, in preparation for creating a new user.cluster.node.name
MailConfigurationService.getMailConfiguration()
application
with address
is permitted to make a request
to the Crowd server.HibernateDao.load(long)
to
work correctlyHibernateDao.load(Serializable)
to work
correctly.DefaultLogger
(which has priority 1) to
ensure this logger is always used.ExternalLinkClickedEvent
.user
that matches the supplied name
from a remote directory.AttributeMapper.getValues(DirContextAdapter)
will
be called on the results.ContextMapperWithRequiredAttributes.mapFromContext(Object)
will
be called on the results.SecurityServerClient
, for when you need more API access than the
authentication manager provides.HibernateOperation
.com.atlassian.crowd.manager.mail.MailConfigurationService#getConfiguration()
PropertyManager.getProperty(String)
DirectorySynchronisationRoundInformation.getStatusKey()
.PasswordEncoder.getKey()
PasswordEncoder.getKey()
SupportInformationService.getSupportInformation(User)
in map format.synchronisable
, else null
user
that matches the supplied name
.userName
, fetches the user's details, either from cache or from the Crowd server.User
, if one is available.user
that matches the supplied name
.userName
, fetches the user's details and their associated attributes, either from cache or from the Crowd server.null
if there is no value.DirectoryObject
type or more concrete typesCrowdMatchers.group()
but its argument is used to set the matcher type.DirectoryGroupMatcher.group()
but its argument is used to set the matcher type.GroupMatcher.group()
but its argument is used to set the matcher type.PermittedGroupMatcher.group()
but its argument is used to set the matcher type.GroupAdministrationConfigurationService
which only works for cached directories and usersGroup
Group
Group
in order to be compatible.LDAPGroupWithAttributes
implementation of Group
.Group
Group
Group
.Application.getApplicationDirectoryMappings()
instead. Since v2.12.GroupMembershipsCreatedEvent
instead. Since 2.10.Group
DirectoryEntities.NAME_FUNCTION
instead.GroupType
to GroupType.GROUP
Group
SynchronisableDirectoryProperties.IS_SYNCHRONISING
attribute from the updated directory, so we can recognise when
a directory requires initial synchronisation.BatchFinder
.HttpClient
.IllegalArgumentException
to a Response
.ImmutableApplication.Builder
instead.ApplicationDirectoryMapping
Attributes
interface.ImmutableAuditLogChangeset.Builder
insteadImmutableAuditLogChangeset
.ImporterDAO
based on a given configurationImporterFactory
Configuration
DirectorySynchronisationTokenStore
that uses the database for token
storageDirectory
MembershipSearchStrategy
which aggregates memberships across multiple directories.InMemoryAssociationCache.nextId()
UserSearchStrategy
and GroupSearchStrategy
implementation which merges results in-memory.MembershipSearchStrategy
which only return memberships associated with the canonical users directory.InternalDirectoryEntity
, it has common logic for operating on attributesDirectoryInstanceLoader
specialised for Internal Directories.RemoteDirectory
for use at runtime
by the Crowd security server.InternalDirectory
group
.InternalMembership
.RemoteDirectory
that is used by InternalDirectories.User
.token
as invalid, meaning that the principal it represents is no longer
authenticated.InvalidAuthenticationException
with the specified detail message.InvalidAuthenticationException
with the specified detail message and cause.InvalidAuthenticationException
with the specified cause.InvalidGroupException
with the invalid group given and a cause.InvalidGroupException
with the invalid group andInvalidMembershipException
to a Response
.InvalidTokenException
to a 401 (Unauthorized) status.SynchronisationStatusManager
insteadApplicationType.PLUGIN
CrowdHttpAuthenticator.checkAuthenticated(HttpServletRequest, HttpServletResponse)
instead.CrowdAuthenticator.checkAuthenticated(HttpServletRequest, HttpServletResponse)
instead.AuthenticationManager.authenticate(com.atlassian.crowd.model.authentication.UserAuthenticationContext)
is still valid, given the validation factors.Condition
that is true if the instance is running in Data Center modeAuditService.shouldAuditEvent()
groupName
represents a valid group, false otherwise.true
if the childGroup is a direct member of the parentGroup in any of the application's assigned directories.true
if the childGroup is a direct member of the parentGroup in the directory specified by the passed in directoryId
.true
if childGroupName
is a direct or indirect (nested) member of parentGroupName
.true
if the childGroup
is a direct or indirect (nested) member of the parentGroup
.true
if the childGroup is a direct or indirect (nested) member of the parentGroup in any of the application's active assigned directories.true
if the childGroup is a direct or indirect (nested) member of the parentGroup in the directory specified by the passed in directoryId
.true
CrowdLicenseManager.isLicenseValid()
true
if groups and group memberships are to be mutated only
(created, updated, deleted) in local storage, otherwise the mutations will be
propagated to the underlying LDAP implementation (full read-write LDAP groups).true
if user active status is updated independently in the Crowd cache and the remote
directory.true
if user status are updated independently in the Crowd cache and the remote directory.userName
is a member of groupName
samlConsumerUrl
matches plugin's SAML consumer URL suffix.false
); or if we can use a more
efficient but relaxed form of standardisation (value = true
).xmlfilename
is available.xmlfilename
is available.PropertyManager.setCookieConfiguration(CookieConfiguration)
instead. Since v3.0.true
if userName
represents a valid user.true
if the user is a direct member of the group in the directory of the first user found with the specified username.true
if the user is a direct member of the group in the directory specified by the passed in directoryId
.true
if the user is a direct or indirect (nested) member of the group.true
if the user is a direct or indirect (nested) member of the group.true
if the user is a direct or indirect (nested) member of the group in the directory of the first user found with the specified username.true
if the user is a direct or indirect (nested) member of the group in the directory specified by the passed in directoryId
.Token
's
otherwise assume we are using in-memoryApplicationSubtype
if suppliedSynchronisationStatusManager
insteadSynchronisationStatusManager
insteadDate
, is the last time the principal had a successful token validation.PasswordCredential
to the value expected by a particular directory connector.RemoteDirectory
for use at runtime
by the Crowd security server.SSLParameters.setEndpointIdentificationAlgorithm(String)
to enable LDAPS hostname
verification.Md5PasswordEncoder
which supports an Ldap version via having a label of "{MD5}"
preappended to the encoded hash.LdapShaPasswordEncoder
to specifically add salt to the SSHA
if it has not been providedAttributes
object to the Crowd {User} object type, and vice versa.LicensedUser
LicensingSummary
NamingEnumeration
and only return up to a limited number of elements.ApplicationType.JIRA
applicationsession.load
method to obtain a proxy (or actual instance if the object is in
session) by NOT hitting the database immediately.session.load
method to obtain a proxy (or actual instance if the object is in
session) by NOT hitting the database immediately.LoggingProfilingTest
.logMessage
.DirectoryEntities.LOWER_NAME_FUNCTION
.DirectoryEntities.LOWER_NAME_FUNCTION
.user
.user
.Attributes
object containing the information in the Group
object.Attributes
object containing the information in the User
object.Group
object containing the information in the Attributes
object.User
object containing the information in the Attributes
object.Membership
s.Group
.EventPublisher
that allows special handling for sets of many events sent at the same time.Directory.getName()
instead. Since 3.4.0.Application.getName()
instead. Since 3.4.0.DirectoryEntities.NAME_FUNCTION
.DirectoryEntities.NAME_FUNCTION
.Directory.getName()
instead. Since 3.4.0.InvalidAuthenticationException
with a default detail message using the
name of the entity that failed to authenticate.InvalidAuthenticationException
with a default detail message using the
name of the entity that failed to authenticate, and a cause.MembershipSearchStrategy
for an application with no active directories associated.CrowdXWorkTransactionInterceptor
AuditService
, to be used by products embedding Crowd.BeforeGroupRemoval
which does nothing.DefaultGroupMembershipService
, meant to be used in productsPasswordScore.VERY_STRONG
, intended for use by products which do not intend to
implement PasswordScoreService in a meaningful way.TokenLockProvider
which doesn't do any lockingNameComparator.normaliserOf(Class)
instead to reduce the number of transformationsUserTemplateWithAttributes.toUserWithNoAttributes(User)
instead. Since v2.9.ApplicationStartedEvent
ServerManager.setCheckPrivateSharedAssociations(boolean)
is set to true (the
default) and the ServerAssociationStore
impl used does not generate ids which are
unique across all instances of the application.CrowdSecurityFilter
that allows for the
parameterisation of the authentication URL by the relaying party.OpenIDAuthenticationTest
.String
, is the requested secure url before redirect to the authentication
page.String
, is the requested secure url before redirect to the authentication
page.String
, is the
requested secure url before redirect to the authentication
page.String
, is the requested secure url before redirect to the authentication
page.SearchRestriction
.#PartialMembershipQueryWithEntityToMatch(Class, EntityDescriptor, EntityDescriptor, boolean, SearchRestriction)
instead. Since v2.9.#PartialMembershipQueryWithNameToMatch(Class, EntityDescriptor, EntityDescriptor, boolean, SearchRestriction, String...)
instead.
Since v2.9.#PartialMembershipQueryWithStartIndex(Class, EntityDescriptor, EntityDescriptor, boolean, int, SearchRestriction, String...)
instead.
Since v2.9.PasswordConstraint
's
for a directory.PasswordConstraint
's
for a directory based on the directory's attributes.PasswordCredential.setEncryptedCredential(boolean)
PasswordCredential.setEncryptedCredential(boolean)
.PasswordCredential.encrypted(String)
or PasswordCredential.unencrypted(String)
factory
methods for clarity instead.PasswordEncoder
's, the current default is currently the AtlassianSecurityPasswordEncoder
PasswordEncoder
is found when a lookup
is done on the PasswordEncoderFactory
PasswordScoreService
.configuration
into Crowd.PermissionManager
.ResourceBundleProvider
that looks for resource bundles defined in plugins.UserTermKeys
,
GroupTermKeys
property
objects.Property
ConsumerManager
after configuring openid4java's proxy settings from the
standard system properties ProxiableConsumerManagerFactory.PROXY_HOST_PROPERTY
and ProxiableConsumerManagerFactory.PROXY_PORT_PROPERTY
(which will also apply to
HTTPS, despite their name), so that the consumer manager will use these proxy settings.String
by randomly selecting characters from the the
alphabet of characters in the range 0-9, A-Z and a-z.String
by randomly selecting characters from
the provided alphabet
until the desired length
is reached.ApplicationServiceGeneric
that supports recovery mode.DirectoryManagerGeneric
to provide recovery-mode aware behaviour.CrowdAuthenticator.checkRememberMeLoginToCrowd(HttpServletRequest, HttpServletResponse)
instead.tokens
from the crowd database.RemoteAddressEntity
.RemoteDirectory
that allows integration with a remote Crowd server.RemoteDirectory
for use at runtime
by the Crowd security server.RemoteDirectorySynchronisedEvent
, however it's published when a directory
synchronisation fails.SynchronisableDirectory
after it has completed synchronising its cache.address
has been set.CachingUserManager.removeUser(String)
to ensure the users details are removed from any and
all user->groups and (user+group)->[yes,no] caches.CachingGroupManager.removeGroup(String)
to ensure the group details are removed from any and
all user->groups and (user+group)->[yes,no] caches.exclusionToken
.group
that matches the supplied name
.group
that matches the supplied name
.directoryId
.directoryId
.directoryId
.userName
from the group identified by groupName
.OperationType
from the Application+Directory mappinguser
that matches the supplied name
.user
that matches the supplied name
.directoryId
.directoryId
.directoryId
.MembershipType.GROUP_USER
relationships
from parent groups to the given username.group
.directoryId
.user
.User
.directoryId
.RequestResetPasswordEvent
's
by sending an email to the user, letting them know their new password.RequestUsernamesEvent
's
by sending an email to the user, letting them know their new password.null
if this application does not have such a user.ResourceBundle
s.RestCrowdClientFactory
methodsRestCrowdClient
.TokenAuthenticationManagerImpl
by retrying authentications that fail due to a
concurrent authentication creating a token.Iterable
over group Membership
s optimised for the case
where we already have all or some of the DNs and names of possible users and sub-groups.HttpRoute
with a specific port by filling
in the default with DefaultSchemePortResolver
.ValidationRule
Runnable
under the lock.tokens
from the crowd
server.tokens
from the crowd
database.AdalAuthenticator
, uses the current thread to retrieve the authentication resultSAMLTrustEntity
CrowdSpecificRememberMeSettings.isEnabled()
happens to be
false
all existing tokens will be expired immediatelyEntityQuery
EntityQuery
.AliasQuery
search on the alias tables of Crowd.SearchableTokenStorage
that provides
transaction-wrapped access.directoryId
.groups
that match the supplied query criteria.List<Group>
or List<String>
groupnames matching the search criteria defined in the query.directoryId
.groupsQuery
.restrictions
and returns a list
of groups that match.directoryId
.directories
users
that match the supplied query criteria.List<User>
or List<String>
matching the search criteria defined in the query.directoryId
.usersQuery
.restrictions
and returns a list
of users that match.String
s by selecting characters from
an alphabet using a cryptographically secure PRNG.Filter
that disables all Seraph processing further along the chain.BatchProcessor
that reifies the Session
generic.tokens
from the crowd server.DirectoryInstanceLoader
after
constructing an InternalDirectory.DirectoryInstanceLoader
after
constructing an InternalDirectory.DirectoryInstanceLoader
after
constructing an InternalDirectory.HttpSession
.HttpSession
.HttpSession
.batchSize
value should be the same
as the hibernate.jdbc.batch_size
Hibernate property.DirectoryInstanceLoader
after
constructing an InternalDirectory.directoryId
will be set by the
crowd framework.DirectoryInstanceLoader
after
constructing an InternalDirectory.directoryId
and the passed in position
in the current list of directories configured for an application.PropertyManager.setCookieConfiguration(CookieConfiguration)
instead. Since v3.0.attributes
.LdifLoaderRule
to make sure
that the last restored LDIF file is tracked correctlygroupName
.Logger
instance with the provided name from the LoggerFactory
, replacing any
previous wrapped logger.com.atlassian.crowd.manager.mail.MailConfigurationService#saveConfiguration()
address
is permitted/forbidden from making a request to the Crowd server.SupportInformationBuilder.prefix(String)
instead. Since 3.4.xmlfilename
has been restored.xmlfilename
has been restored.PropertyManager.setCookieConfiguration(CookieConfiguration)
instead. Since v3.0.com.atlassian.crowd.manager.mail.MailConfigurationService#saveConfiguration()
PropertyManager.setProperty(String, String)
Clock
that can be set, for tests
Use applicationContext-testClock.xml to inject it into your tests and make it override the system clock.ApplicationImpl.updateDetailsFromApplication(Application)
.SecurityContext
.ObjectMapper
that has following advantages over ObjectMapper
:
It's fully thread-safe, as it uses ObjectReader
and ObjectWriter
which are immutable
Is not prone to performance problems under heavy load
SearchStrategy
optimized for a single directoryAbstractLogger
which delegates to an SLF4J Logger
instance retrieved
from the LoggerFactory
.Slf4jLogger
and initializes the wrapped SLF4J Logger
with a fallback reference,
which will be used for any log output generated before Slf4jLogger.setName(String)
is called.SMTPServer.Builder
instead. Since 3.2SMTPServer.Builder
instead. Since 3.2SMTPServer.Builder
instead. Since 3.2LdapTemplate
and perform all operations with the context
ClassLoader set to this class's ClassLoader.GenericLegacyTableQueries
and overrides where SQL Server requires
different syntax.SsoTabViewEvent
into
SSOTabViewAnalyticsEvent
once per day.BatchProcessor
that reifies the StatelessSession
generic.CrowdService
in a static way.ResourceBundleProvider
that looks in fixed set of locations.directoryId
.directoryId
.directoryId
.directoryId
.EventStore
.TokenLockProvider
, backed by Guava's Striped
true
if this AuthenticationProvider
supports the indicated
Authentication
object.RemoteDirectory.updateUserCredential(String, PasswordCredential)
or
RemoteDirectory.addUser(com.atlassian.crowd.model.user.UserTemplate, com.atlassian.crowd.embedded.api.PasswordCredential)
with a PasswordCredential
instance where PasswordCredential.isEncryptedCredential()
returns true
and the instance is not equal to PasswordCredential.NONE
will succeed; otherwise, it will fail.TokenManager
to allow switching between two TokenDAO delegates (in-memory and database).SynchronisableDirectory
, as long as
SynchronisationMode.FULL
is the only mode being used.name
, active
) are the same as the values in the group
user
to the various fields (eg name
).group
contains the same values as the object fields (eg name
, active
).user
SynchronisationStatusManager#syncFinished(long, SynchronisationStatusKey, List, String)
insteadRemoteDirectory
that holds a local cache to remote data.SynchronisationStatusManager.syncStatus(long, SynchronisationStatusKey, List)
insteadRecoveryModeService
that activates recovery mode in presence of a system property that
is also used to configure the recovery user password.CookieConfigEntity
EventEntityList
ErrorEntity
.GroupEntity
MultiValuedAttributeEntityList
GroupEntityList
PasswordEntity
.UserEntity
MultiValuedAttributeEntityList
UserEntityList
UserEntity
(unmarshalling)
ObjectNotFoundException
.ObjectNotFoundException
.ObjectNotFoundException
from ObjectNotFoundException
.ObjectNotFoundException
.ObjectNotFoundException
.ObjectNotFoundException
.FeatureInaccessibleException
if the feature is not accessible.IdentifierUtils.toLowerCase(String)
method.Application
s to a list of ApplicationEntity
s.ApplicationType
.AttributeEntityList
.DirectoryMappingEntity
to a DirectoryMapping
.DirectoryMapping
to a DirectoryMappingEntityList
.DirectoryMapping
to a DirectoryMappingEntity
.DirectoryMappingEntityList
to a list of DirectoryMapping
.ImmutableToken
instead. Since 3.6.0.Token
Token
's this should be the
only way you create a Token for CrowdTokenGenerator
is responsible for generating tokens when a successful authentication has occurred.Token
is invalidated.SessionTokenStorage
that should be
used for token management.AuthenticatedTokenQuery
instead. Since 3.6.0.OperationType
.OperationType
.OperationType
to an operation type string.OperationType
s to a set of operation type strings.PasswordEntity
to a PasswordCredential
.RemoteAddressEntity
to a RemoteAddress
.RemoteAddress
es to RemoteAddressEntitySet
.RemoteAddress
to a RemoteAddressEntity
.RemoteAddressEntitySet
to a set of RemoteAddress
.data:
URI, that points to this avatar.Connection.close()
is invokedExecutor
} wrapper, that wraps executed code into a transaction.Runnable
under the lock.ApplicationType
).UnsupportedOperationException
to a Response
.ApplicationConfiguration
, should be called after the configuration
is loaded, but before it's used by the application.DatabaseDetails
, passed after completing database setup.Directory
.group
.group
.directoryId
.description
and active
description
and active
userName
.SynchronisableDirectory
's current synchronisation start time.user
.User
.directoryId
.directoryId
.displayName
and lastName
fields using firstName
, lastName
and name
fields
for users with empty display name or empty last name in internal
directories.DirectoryProperties.CACHE_ENABLED
properties set to
true.SynchronisableDirectoryProperties.INCREMENTAL_SYNC_ENABLED
attribute set to
true.SynchronisableDirectoryProperties.INCREMENTAL_SYNC_ENABLED
properties set to
true.com.atlassian.crowd.model.directory.DirectoryImpl.ATTRIBUTE_KEY_LOCAL_USER_STATUS
set to true to
preserve the behaviour previous to CWD-995.Profile
s, and then can choose to provide one of
these profiles when an openid client (relying party) requests the openid server to authenticate the user.CrowdMatchers.user()
but its argument is used to set the matcher type.UserMatcher.user()
but its argument is used to set the matcher type.User
User
UserAuthenticationContext
is used to authenticate
users
.UserAuthenticationSucceededEvent
and UserTokenVerificationSucceededEvent
events
and publishing analytics event SSOLoginEvent
.user
.User
in order to be compatible.User
LDAPUserWithAttributes
implementation of User
.User
User
as a result of directory synchronisation.UserCredentialVerifier
User
s, PasswordCredential
s and user attributes.UsersDeletedEvent
instead.Condition
that is true if the current user is a group adminCondition
that is true if the current user is a system administratorUser
.ResultSet
to a MembershipDTO
.User
User
User
s.searchText
is a substring of any name related
field or an email field.tokens
from the crowd database.User
This is a generic event.List
generated during validationVerifier
'sVerifier
'sDirectoryType
and adds the returned error to the field errorscom.atlassian.crowd.integration.model.RemotePrincipal
authenticates with the crowd server.com.atlassian.crowd.integration.model.RemotePrincipal
authenticates with the crowd server.web.xml
url-pattern
.Webhook
s.ImmutableWebhook
instead, since 3.6.0.Webhook
s.Predicate
that returns true when its (entity) argument's name is equal to the given name to
match.messageContext
provided by XFire.Mapper
's
Each mapper has an exportXML()
that process's each entity and writes all required relationship to an
XML element that is then returned to this class to be finally written to disk (on export).XMLObject
and SAMLObject
.Copyright © 2019 Atlassian. All rights reserved.