A B C D E G H I L M N O P R S T U V W X

A

ALREADY_FILTERED - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

APP_ID_NOT_FOUND - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

APP_UNKNOWN - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

AbstractAuthenticator - class com.atlassian.seraph.auth.AbstractAuthenticator.

An abstract implementation of Authenticator that implements a lot of base methods

AbstractAuthenticator() - Constructor for class com.atlassian.seraph.auth.AbstractAuthenticator

Application - interface com.atlassian.security.auth.trustedapps.Application.

Represents a base of an application that can participate in a trusted relationship.

ApplicationCertificate - interface com.atlassian.security.auth.trustedapps.ApplicationCertificate.

Represents the certificate received by the filter from a trusted client.

ApplicationRetriever - interface com.atlassian.security.auth.trustedapps.ApplicationRetriever.

Responsible for getting Application details from a client

ApplicationRetriever.ApplicationNotFoundException - exception com.atlassian.security.auth.trustedapps.ApplicationRetriever.ApplicationNotFoundException.

An application certificate was not found at a web site.

ApplicationRetriever.InvalidApplicationDetailsException - exception com.atlassian.security.auth.trustedapps.ApplicationRetriever.InvalidApplicationDetailsException.

An application certificate was found but is not valid.

ApplicationRetriever.RemoteSystemNotFoundException - exception com.atlassian.security.auth.trustedapps.ApplicationRetriever.RemoteSystemNotFoundException.

Remote website counld not be contacted at the address provided.

ApplicationRetriever.RetrievalException - exception com.atlassian.security.auth.trustedapps.ApplicationRetriever.RetrievalException.

Used if the Application cannot be retrieved.

AuthenticationContext - interface com.atlassian.seraph.auth.AuthenticationContext.

Allow the user to be retrieved at any time throughout the application.

AuthenticationContextImpl - class com.atlassian.seraph.auth.AuthenticationContextImpl.

AuthenticationContextImpl() - Constructor for class com.atlassian.seraph.auth.AuthenticationContextImpl

Authenticator - interface com.atlassian.seraph.auth.Authenticator.

An Authenticator is used to authenticate users, log them in, log them out and check their roles.

AuthenticatorException - exception com.atlassian.seraph.auth.AuthenticatorException.

An exception for all Authenticator related error conditions

AuthenticatorException() - Constructor for class com.atlassian.seraph.auth.AuthenticatorException

AuthenticatorException(String) - Constructor for class com.atlassian.seraph.auth.AuthenticatorException

addInterceptor(Interceptor) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

addRequestParameter(String, String) - Method in interface com.atlassian.security.auth.trustedapps.request.TrustedRequest

addRequestParameter(String, String) - Method in class com.atlassian.security.auth.trustedapps.request.commonshttpclient.CommonsHttpClientTrustedRequest

addRequestParameters(EncryptedCertificate, TrustedRequest) - Static method in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils

Add request parameters to the trusted request.

afterLogin(HttpServletRequest, HttpServletResponse, String, String, boolean, String) - Method in interface com.atlassian.seraph.interceptor.LoginInterceptor

afterLogout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.interceptor.LogoutInterceptor

appendPathToContext(String, String) - Static method in class com.atlassian.seraph.util.RedirectUtils

Appends the path to the context, dealing with any missing slashes properly.

application - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

authenticate(Principal, String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Uses OSUser's authenticate() to authenticate a user.

authenticate(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

authenticator - Variable in class com.atlassian.seraph.config.SecurityConfigImpl

B

BAD_MAGIC - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

BAD_PROTOCOL_VERSION - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

BAD_REMOTE_IP - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

BAD_URL - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

BAD_XFORWARD_IP - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

BASIC_AUTH - Static variable in interface com.atlassian.seraph.config.SecurityConfig

BaseEncryptionProvider - class com.atlassian.security.auth.trustedapps.BaseEncryptionProvider.

Base class for encryption provider, provides methods that are not crypto-specific

BaseEncryptionProvider() - Constructor for class com.atlassian.security.auth.trustedapps.BaseEncryptionProvider

BaseLoginFilter - class com.atlassian.seraph.filter.BaseLoginFilter.

This is a base authentication filter.

BaseLoginFilter() - Constructor for class com.atlassian.seraph.filter.BaseLoginFilter

BouncyCastleEncryptionProvider - class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider.

BouncyCastleEncryptionProvider() - Constructor for class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

beforeLogin(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in interface com.atlassian.seraph.interceptor.LoginInterceptor

beforeLogout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.interceptor.LogoutInterceptor

C

CERTIFICATE - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request

Header name for trusted application certificate

CHARSET_NAME - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Constant

Default charset used for encoding/decoding Strings.

COOKIES_TO_SEND - Static variable in class com.atlassian.seraph.util.CookieUtils

CachedPathMapper - class com.atlassian.seraph.util.CachedPathMapper.

Caches the results of the PathMapper

CachedPathMapper(Map, Map) - Constructor for class com.atlassian.seraph.util.CachedPathMapper

Creates a CachedPathMapper object that will use cacheMap to cache the results of the get(String) calls and cacheAllMap to cache the results of the getAll(String) class.

CertificateTooOldException - exception com.atlassian.security.auth.trustedapps.CertificateTooOldException.

CertificateTooOldException(ApplicationCertificate, long) - Constructor for class com.atlassian.security.auth.trustedapps.CertificateTooOldException

CommonsHttpClientTrustedRequest - class com.atlassian.security.auth.trustedapps.request.commonshttpclient.CommonsHttpClientTrustedRequest.

Commons Http Client implementation of TrustedRequest

CommonsHttpClientTrustedRequest(HttpMethod) - Constructor for class com.atlassian.security.auth.trustedapps.request.commonshttpclient.CommonsHttpClientTrustedRequest

ConfigurationException - exception com.atlassian.seraph.config.ConfigurationException.

Exception thrown during Seraph configuration

ConfigurationException() - Constructor for class com.atlassian.seraph.config.ConfigurationException

ConfigurationException(String) - Constructor for class com.atlassian.seraph.config.ConfigurationException

CookieEncoder - interface com.atlassian.seraph.cookie.CookieEncoder.

Encodes and decodes the username and password for remember-me cookies

CookieFactory - class com.atlassian.seraph.cookie.CookieFactory.

Factory for cookie-related interfaces.

CookieFactory() - Constructor for class com.atlassian.seraph.cookie.CookieFactory

CookieHandler - interface com.atlassian.seraph.cookie.CookieHandler.

Handles basic cookie tasks

CookieUtils - class com.atlassian.seraph.util.CookieUtils.

Seraph utility class for dealing with cookies Includes code from Jive 1.2.4 (released under the Apache license)

CookieUtils() - Constructor for class com.atlassian.seraph.util.CookieUtils

CurrentApplication - interface com.atlassian.security.auth.trustedapps.CurrentApplication.

Represents current application.

canLogin(Principal, HttpServletRequest) - Method in class com.atlassian.seraph.auth.GroupRoleMapper

Users can login if they exist.

canLogin(Principal, HttpServletRequest) - Method in interface com.atlassian.seraph.auth.RoleMapper

certificateTimeout - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

clearUser() - Method in interface com.atlassian.seraph.auth.AuthenticationContext

clearUser() - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

com.atlassian.security.auth.trustedapps - package com.atlassian.security.auth.trustedapps

com.atlassian.security.auth.trustedapps.request - package com.atlassian.security.auth.trustedapps.request

com.atlassian.security.auth.trustedapps.request.commonshttpclient - package com.atlassian.security.auth.trustedapps.request.commonshttpclient

com.atlassian.seraph - package com.atlassian.seraph

com.atlassian.seraph.auth - package com.atlassian.seraph.auth

com.atlassian.seraph.config - package com.atlassian.seraph.config

com.atlassian.seraph.controller - package com.atlassian.seraph.controller

com.atlassian.seraph.cookie - package com.atlassian.seraph.cookie

com.atlassian.seraph.filter - package com.atlassian.seraph.filter

com.atlassian.seraph.interceptor - package com.atlassian.seraph.interceptor

com.atlassian.seraph.logout - package com.atlassian.seraph.logout

com.atlassian.seraph.service - package com.atlassian.seraph.service

com.atlassian.seraph.util - package com.atlassian.seraph.util

configureAuthenticator(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

configureController(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

configureInterceptors(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

configureLoginUrlStrategy(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

configureRoleMapper(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

controller - Variable in class com.atlassian.seraph.config.SecurityConfigImpl

createEncryptedCertificate(String, PrivateKey, String) - Method in class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

createEncryptedCertificate(String, PrivateKey, String) - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Create a new encrypted certificate for transmission to another application

D

DEFAULT_AUTHENTICATOR - Static variable in interface com.atlassian.seraph.auth.Authenticator

DEFAULT_CONFIG_LOCATION - Static variable in class com.atlassian.seraph.config.SecurityConfigImpl

DefaultApplicationCertificate - class com.atlassian.security.auth.trustedapps.DefaultApplicationCertificate.

Default implementation is simply a data container.

DefaultApplicationCertificate(String, String, long) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultApplicationCertificate

DefaultAuthenticator - class com.atlassian.seraph.auth.DefaultAuthenticator.

This authenticator stores the currently logged in user in the session as OSUser User objects.

DefaultAuthenticator() - Constructor for class com.atlassian.seraph.auth.DefaultAuthenticator

DefaultCookieHandler - class com.atlassian.seraph.cookie.DefaultCookieHandler.

DefaultCookieHandler() - Constructor for class com.atlassian.seraph.cookie.DefaultCookieHandler

DefaultCurrentApplication - class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication.

DefaultCurrentApplication(EncryptionProvider, PublicKey, PrivateKey, String) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

DefaultCurrentApplication(PublicKey, PrivateKey, String) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

DefaultEncryptedCertificate - class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate.

DefaultEncryptedCertificate(String, String, String) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

Constructor for protocol '0' certificates

DefaultEncryptedCertificate(String, String, String, Integer, String) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

DefaultIPMatcher - class com.atlassian.security.auth.trustedapps.DefaultIPMatcher.

simple list based implementation.

DefaultIPMatcher(Set) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultIPMatcher

Main ctor.

DefaultLoginUrlStrategy - class com.atlassian.seraph.config.DefaultLoginUrlStrategy.

Login URL strategy that just returns the originally configured values.

DefaultLoginUrlStrategy() - Constructor for class com.atlassian.seraph.config.DefaultLoginUrlStrategy

DefaultRequestValidator - class com.atlassian.security.auth.trustedapps.DefaultRequestValidator.

DefaultRequestValidor aggregates IP and URL matchers and throws an exception if they do not match.

DefaultRequestValidator(IPMatcher, URLMatcher) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultRequestValidator

DefaultTrustedApplication - class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication.

very basic implementation

DefaultTrustedApplication(EncryptionProvider, PublicKey, String, long, RequestValidator) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

DefaultTrustedApplication(EncryptionProvider, PublicKey, String, long, URLMatcher, IPMatcher) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

DefaultTrustedApplication(PublicKey, String, long, URLMatcher, IPMatcher) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

DefaultTrustedApplicationsManager - class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager.

Default implementation.

DefaultTrustedApplicationsManager(CurrentApplication, Map) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

DefaultTrustedApplicationsManager() - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

DefaultTrustedApplicationsManager(EncryptionProvider) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

DefaultURLMatcher - class com.atlassian.security.auth.trustedapps.DefaultURLMatcher.

Takes a set of patterns and assumes a URL matches if it starts with one of the given patterns.

DefaultURLMatcher(Set) - Constructor for class com.atlassian.security.auth.trustedapps.DefaultURLMatcher

decode(EncryptedCertificate, HttpServletRequest) - Method in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

decode(String) - Method in class com.atlassian.security.auth.trustedapps.Transcoder.Base64Transcoder

decode(EncryptedCertificate, HttpServletRequest) - Method in interface com.atlassian.security.auth.trustedapps.TrustedApplication

This method decodes and validates the received certificate.

decodeCookie(String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

decodeEncryptedCertificate(EncryptedCertificate, PublicKey, String) - Method in class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

decodeEncryptedCertificate(EncryptedCertificate, PublicKey, String) - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Decode an encrypted certificate to retrieve its ApplicationCertificate

decodePasswordCookie(String, String) - Method in interface com.atlassian.seraph.cookie.CookieEncoder

Decodes a cookie string containing a username and password.

decodePasswordCookie(String, String) - Method in class com.atlassian.seraph.cookie.EncryptedCookieEncoder

decodePasswordCookie(String, String) - Method in class com.atlassian.seraph.cookie.InsecureCookieEncoder

decodePasswordCookie(String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieEncoder instead

decodePasswordCookie(String, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieEncoder instead

decrypt(String) - Method in class com.atlassian.seraph.util.EncryptionUtils

destroy() - Method in interface com.atlassian.seraph.SecurityService

destroy() - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

destroy() - Method in interface com.atlassian.seraph.auth.Authenticator

destroy() - Method in interface com.atlassian.seraph.config.SecurityConfig

destroy() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

destroy() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

destroy() - Method in class com.atlassian.seraph.filter.SecurityFilter

destroy() - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

destroy() - Method in interface com.atlassian.seraph.interceptor.Interceptor

destroy() - Method in class com.atlassian.seraph.service.PathService

destroy() - Method in class com.atlassian.seraph.service.WebworkService

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.seraph.filter.SecurityFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

E

ERROR - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Response

Header that will contain trusted application error message if it fails

EncryptedCertificate - interface com.atlassian.security.auth.trustedapps.EncryptedCertificate.

Contains the encoded certificate information to be included in the trusted requests between applications.

EncryptedCookieEncoder - class com.atlassian.seraph.cookie.EncryptedCookieEncoder.

Encrypts the username and password using password-based-encryption (MD5 and DES).

EncryptedCookieEncoder() - Constructor for class com.atlassian.seraph.cookie.EncryptedCookieEncoder

EncryptedCookieEncoder(String) - Constructor for class com.atlassian.seraph.cookie.EncryptedCookieEncoder

EncryptionProvider - interface com.atlassian.security.auth.trustedapps.EncryptionProvider.

Abstracts out the provision of encryption to the trusted app service.

EncryptionUtils - class com.atlassian.seraph.util.EncryptionUtils.

EncryptionUtils() - Constructor for class com.atlassian.seraph.util.EncryptionUtils

encode(String) - Method in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Generates a new certificate that will be sent to the remote server when asking to perform privileged operation for this application.

encode(String) - Method in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

Returned String can be used as a certificate to talk to the server that trusts this application.

encode(byte[]) - Method in class com.atlassian.security.auth.trustedapps.Transcoder.Base64Transcoder

encodeCookie(String, String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

encodePasswordCookie(String, String, String) - Method in interface com.atlassian.seraph.cookie.CookieEncoder

Builds a cookie string containing a username and password, using offsets to customise the encoding.

encodePasswordCookie(String, String, String) - Method in class com.atlassian.seraph.cookie.EncryptedCookieEncoder

encodePasswordCookie(String, String, String) - Method in class com.atlassian.seraph.cookie.InsecureCookieEncoder

encodePasswordCookie(String, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieEncoder instead

encodePasswordCookie(String, String, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieEncoder instead

encrypt(String) - Method in class com.atlassian.seraph.util.EncryptionUtils

encryptionProvider - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

G

GROUP_CACHE_KEY - Static variable in class com.atlassian.seraph.util.GroupCache

GroupCache - class com.atlassian.seraph.util.GroupCache.

A cache of request (via the remote user) -> group lookups

GroupCache() - Constructor for class com.atlassian.seraph.util.GroupCache

GroupRoleMapper - class com.atlassian.seraph.auth.GroupRoleMapper.

A simple RoleMapper which maps directly between group names and role names.

GroupRoleMapper() - Constructor for class com.atlassian.seraph.auth.GroupRoleMapper

generateNewKeyPair() - Method in class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

Generates a new KeyPair.

generateNewKeyPair() - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Generate a new public/private key pair for an application

generateUID() - Method in class com.atlassian.security.auth.trustedapps.BaseEncryptionProvider

generateUID() - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Generate a unique 32 character String ID.

generateUID() - Static method in class com.atlassian.security.auth.trustedapps.UIDGenerator

Generates a a 32 character long unique ID.

get(String) - Method in class com.atlassian.seraph.util.CachedPathMapper

get(String) - Method in class com.atlassian.seraph.util.PathMapper

Retrieve appropriate key by matching patterns with supplied path.

getAll(String) - Method in class com.atlassian.seraph.util.CachedPathMapper

getAll(String) - Method in class com.atlassian.seraph.util.PathMapper

Retrieve all mappings which match a supplied path.

getApplication() - Method in interface com.atlassian.security.auth.trustedapps.ApplicationRetriever

Reads an Application from the data supplied by the Reader.

getApplication() - Method in class com.atlassian.security.auth.trustedapps.ListApplicationRetriever

getApplication() - Method in class com.atlassian.security.auth.trustedapps.ReaderApplicationRetriever

getApplication() - Method in class com.atlassian.security.auth.trustedapps.URLApplicationRetriever

getApplicationCertificate(String) - Method in class com.atlassian.security.auth.trustedapps.BaseEncryptionProvider

getApplicationCertificate(String) - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Retrieve the application certificate from some other application, over HTTP.

getApplicationID() - Method in interface com.atlassian.security.auth.trustedapps.ApplicationCertificate

getApplicationID() - Method in class com.atlassian.security.auth.trustedapps.DefaultApplicationCertificate

getAuthType() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getAuthType() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthType() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthenticationContext() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthenticationContext() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthenticationContext() - Method in class com.atlassian.seraph.filter.SecurityFilter

getAuthenticator() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthenticator() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthenticator() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getAuthenticator() - Method in class com.atlassian.seraph.logout.LogoutServlet

getAuthenticator(ServletContext) - Static method in class com.atlassian.seraph.util.SecurityUtils

getAutoLoginCookieAge() - Method in interface com.atlassian.seraph.config.SecurityConfig

Autologin cookie age in seconds

getAutoLoginCookieAge() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getBadIPAddress() - Method in class com.atlassian.security.auth.trustedapps.IPAddressFormatException

getBytes(String) - Method in class com.atlassian.security.auth.trustedapps.Transcoder.Base64Transcoder

getCertificate() - Method in class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

getCertificate() - Method in interface com.atlassian.security.auth.trustedapps.EncryptedCertificate

String that contains three lines:

getCode() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

getCode() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage

getConfig() - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getContainedText(Node, String) - Static method in class com.atlassian.seraph.util.XMLUtils

With a given parent XML Element, find the text contents of the child element with supplied name.

getController() - Method in interface com.atlassian.seraph.config.SecurityConfig

getController() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getCookie(HttpServletRequest, String) - Method in interface com.atlassian.seraph.cookie.CookieHandler

Returns the specified Cookie object, or null if the cookie does not exist.

getCookie(HttpServletRequest, String) - Method in class com.atlassian.seraph.cookie.DefaultCookieHandler

getCookie(HttpServletRequest, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieHandler instead

getCookieEncoder() - Static method in class com.atlassian.seraph.cookie.CookieFactory

getCookieEncoding() - Method in interface com.atlassian.seraph.config.SecurityConfig

getCookieEncoding() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getCookieHandler() - Static method in class com.atlassian.seraph.cookie.CookieFactory

getCookiePath(HttpServletRequest) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Root the login cookie at the same location as the webapp.

getCookieValue(HttpServletRequest, String) - Method in interface com.atlassian.seraph.cookie.CookieHandler

Returns the value of the specified cookie as a String.

getCookieValue(HttpServletRequest, String) - Method in class com.atlassian.seraph.cookie.DefaultCookieHandler

getCookieValue(HttpServletRequest, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieHandler instead

getCreationTime() - Method in interface com.atlassian.security.auth.trustedapps.ApplicationCertificate

getCreationTime() - Method in class com.atlassian.security.auth.trustedapps.DefaultApplicationCertificate

getCurrentApplication() - Method in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

getCurrentApplication() - Method in interface com.atlassian.security.auth.trustedapps.TrustedApplicationsManager

getFilterConfig() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Deprecated. Not needed in latest version of Servlet 2.3 API

getFilterConfig() - Method in class com.atlassian.seraph.filter.SecurityFilter

Deprecated. Not needed in latest version of Servlet 2.3 API

getFilterConfig() - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

Deprecated. Not needed in latest version of Servlet 2.3 API

getFormattedMessage() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage

getGroups(HttpServletRequest) - Static method in class com.atlassian.seraph.util.GroupCache

Get a list of the groups for the current remote user.

getID() - Method in interface com.atlassian.security.auth.trustedapps.Application

getID() - Method in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

getID() - Method in class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

getID() - Method in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

getID() - Method in interface com.atlassian.security.auth.trustedapps.EncryptedCertificate

ID of the trusted application that encrypted this certificate

getID() - Method in class com.atlassian.security.auth.trustedapps.SimpleApplication

getInitParameters(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getInstance() - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Get a SecurityConfig instance.

getInstance(String) - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Get a SecurityConfig instance.

getInstance(String) - Static method in class com.atlassian.seraph.config.SecurityConfigImpl

Instantiates a SecurityConfigImpl.

getInstance() - Static method in class com.atlassian.seraph.config.SecurityConfigImpl

Instantiates a SecurityConfigImpl using the default config file.

getInterceptors(Class) - Method in interface com.atlassian.seraph.config.SecurityConfig

getInterceptors(Class) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLinkLoginURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLinkLoginURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLinkLoginURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLinkLoginURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLinkLoginURL(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Returns a login URL that would log the user in to access resource indicated by request.

getLoginCookieKey() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getLoginCookieKey() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginCookieKey() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginCookiePath() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getLoginCookiePath() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginCookiePath() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLoginURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLoginURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginUrl(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Returns a login URL that would log the user in to access resource indicated by request.

getLogoutInterceptors() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getLogoutURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLogoutURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLogoutURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLogoutURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getMagicNumber() - Method in class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

getMagicNumber() - Method in interface com.atlassian.security.auth.trustedapps.EncryptedCertificate

Magic Number for Transmission decryption validation.

getMessage() - Method in class com.atlassian.security.auth.trustedapps.InvalidCertificateException

getMessage() - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter.Authenticator.Result

getOriginalURLKey() - Method in interface com.atlassian.seraph.config.SecurityConfig

getOriginalURLKey() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getParameters() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage

getPathInfo(HttpServletRequest) - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

getProtocolVersion() - Method in class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

getProtocolVersion() - Method in interface com.atlassian.security.auth.trustedapps.EncryptedCertificate

Protocol version.

getPublicKey() - Method in interface com.atlassian.security.auth.trustedapps.Application

Public key of this application.

getPublicKey() - Method in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

getPublicKey() - Method in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

getPublicKey() - Method in class com.atlassian.security.auth.trustedapps.SimpleApplication

getRemoteUser(HttpServletRequest) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getRemoteUser(HttpServletRequest) - Method in interface com.atlassian.seraph.auth.Authenticator

getRequiredRoles(HttpServletRequest) - Method in interface com.atlassian.seraph.SecurityService

getRequiredRoles(HttpServletRequest) - Method in class com.atlassian.seraph.service.PathService

getRequiredRoles(String) - Method in class com.atlassian.seraph.service.PathService

getRequiredRoles(HttpServletRequest) - Method in class com.atlassian.seraph.service.WebworkService

getRoleMapper() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getRoleMapper() - Method in interface com.atlassian.seraph.config.SecurityConfig

getRoleMapper() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getSecretKey() - Method in class com.atlassian.security.auth.trustedapps.DefaultEncryptedCertificate

getSecretKey() - Method in interface com.atlassian.security.auth.trustedapps.EncryptedCertificate

Secret Key for decrypting the certificate.

getSecurityConfig() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getSecurityConfig() - Method in class com.atlassian.seraph.filter.SecurityFilter

getSecurityConfig() - Method in class com.atlassian.seraph.logout.LogoutServlet

getServerNameAndPath(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Reconstruct the request URL from a HttpServletRequest.

getServices() - Method in interface com.atlassian.seraph.config.SecurityConfig

getServices() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getSeverity() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

getStatus() - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter.Authenticator.Result

getTransportErrorMessage() - Method in class com.atlassian.security.auth.trustedapps.TransportException

getTrustedApplication(String) - Method in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

getTrustedApplication(String) - Method in interface com.atlassian.security.auth.trustedapps.TrustedApplicationsManager

getUser(HttpServletRequest) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getUser(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getUser() - Method in interface com.atlassian.seraph.auth.AuthenticationContext

getUser() - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

getUser(HttpServletRequest) - Method in interface com.atlassian.seraph.auth.Authenticator

getUser(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.auth.Authenticator

getUser(String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Uses OSUser to retrieve a Principal for a given username.

getUser(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Returns the currently logged in user, trying in order:

Session, only if one exists Cookie, only if no session exists Basic authentication, if the above fail, and authType=basic

Warning: only in the case of cookie and basic auth will the user be authenticated.

getUser() - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter.Authenticator.Result

getUserFromBasicAuthentication(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Checks the Authorization header to see whether basic auth token is provided.

getUserFromCookie(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Extracts the username and password from the cookie and calls login to authenticate, and if successful store the token in the session.

getUserFromSession(HttpServletRequest) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Tries to get a logged in user from the session.

getUserName() - Method in interface com.atlassian.security.auth.trustedapps.ApplicationCertificate

getUserName() - Method in class com.atlassian.security.auth.trustedapps.DefaultApplicationCertificate

H

HEADER_TRUSTED_APP_CERT - Static variable in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Deprecated. since 0.34 use TrustedApplicationUtils.Header.Request#CERT instead.

HEADER_TRUSTED_APP_ERROR - Static variable in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Deprecated. since 0.34 use TrustedApplicationUtils.Header.Response.ERROR instead.

HEADER_TRUSTED_APP_ID - Static variable in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Deprecated. since 0.34 use TrustedApplicationUtils.Header.Request.ID instead.

HEADER_TRUSTED_APP_SECRET_KEY - Static variable in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Deprecated. since 0.34 use TrustedApplicationUtils.Header.Request.SECRET_KEY instead.

HEADER_TRUSTED_APP_STATUS - Static variable in interface com.atlassian.security.auth.trustedapps.CurrentApplication

Deprecated. since 0.34 use TrustedApplicationUtils.Header.Response.STATUS instead.

HttpAuthFilter - class com.atlassian.seraph.filter.HttpAuthFilter.

This is a filter that logs the user in.

HttpAuthFilter() - Constructor for class com.atlassian.seraph.filter.HttpAuthFilter

hasRole(Principal, HttpServletRequest, String) - Method in class com.atlassian.seraph.auth.GroupRoleMapper

Assume that roles == groups.

hasRole(Principal, HttpServletRequest, String) - Method in interface com.atlassian.seraph.auth.RoleMapper

I

ID - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request

Header name for trusted application ID

IPAddressFormatException - exception com.atlassian.security.auth.trustedapps.IPAddressFormatException.

IPAddressFormatException(String) - Constructor for class com.atlassian.security.auth.trustedapps.IPAddressFormatException

IPMatcher - interface com.atlassian.security.auth.trustedapps.IPMatcher.

Filter that is supposed to prevent attacks on cross-application trust feature by restricting a range of IP addresses such request can originate from.

Initable - interface com.atlassian.seraph.Initable.

A simple interface to indicate all init-able classes in Seraph

InsecureCookieEncoder - class com.atlassian.seraph.cookie.InsecureCookieEncoder.

Insecure cooking encoder that uses an XOR mask with character offsets to "encode" the username and password

InsecureCookieEncoder() - Constructor for class com.atlassian.seraph.cookie.InsecureCookieEncoder

Interceptor - interface com.atlassian.seraph.interceptor.Interceptor.

The base interface for Seraph interceptors.

InvalidCertificateException - exception com.atlassian.security.auth.trustedapps.InvalidCertificateException.

InvalidCertificateException(TransportErrorMessage, Exception) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidCertificateException

InvalidCertificateException(TransportErrorMessage) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidCertificateException

InvalidCertificateException(TransportException) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidCertificateException

InvalidIPAddressException - exception com.atlassian.security.auth.trustedapps.InvalidIPAddressException.

Thrown when the IP address of the client does not match the allowed IP addresses

InvalidIPAddressException(TransportErrorMessage.Code, String) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidIPAddressException

InvalidRemoteAddressException - exception com.atlassian.security.auth.trustedapps.InvalidRemoteAddressException.

InvalidRemoteAddressException(String) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidRemoteAddressException

InvalidRequestException - exception com.atlassian.security.auth.trustedapps.InvalidRequestException.

Thrown by a RequestMatcher if the Request is not to its liking.

InvalidRequestException(TransportErrorMessage) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidRequestException

InvalidRequestUrlException - exception com.atlassian.security.auth.trustedapps.InvalidRequestUrlException.

Thrown when the Requested URL does not match the allowed request urls.

InvalidRequestUrlException(String) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidRequestUrlException

InvalidXForwardedForAddressException - exception com.atlassian.security.auth.trustedapps.InvalidXForwardedForAddressException.

Thrown if an IP address in an X-Forwarded-For header doesn't match

InvalidXForwardedForAddressException(String) - Constructor for class com.atlassian.security.auth.trustedapps.InvalidXForwardedForAddressException

id - Variable in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

id - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

init(Map, SecurityConfig) - Method in interface com.atlassian.seraph.Initable

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.auth.GroupRoleMapper

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.controller.NullSecurityController

init(SecurityConfig) - Static method in class com.atlassian.seraph.cookie.CookieFactory

init(FilterConfig) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

init(FilterConfig) - Method in class com.atlassian.seraph.filter.SecurityFilter

init(FilterConfig) - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

init() - Method in class com.atlassian.seraph.logout.LogoutServlet

init(ServletConfig) - Method in class com.atlassian.seraph.logout.LogoutServlet

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.service.PathService

Init the service - configure it from the config file

init(Map, SecurityConfig) - Method in class com.atlassian.seraph.service.WebworkService

interceptors - Variable in class com.atlassian.seraph.config.SecurityConfigImpl

invalidateCookie(HttpServletRequest, HttpServletResponse, String, String) - Method in interface com.atlassian.seraph.cookie.CookieHandler

Invalidate the specified cookie and delete it from the response object.

invalidateCookie(HttpServletRequest, HttpServletResponse, String, String) - Method in class com.atlassian.seraph.cookie.DefaultCookieHandler

invalidateCookie(HttpServletRequest, HttpServletResponse, String, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieHandler instead

invalidateCookie(HttpServletRequest, HttpServletResponse, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieHandler instead

isAbsoluteUrl(String) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

isBasicAuthentication(HttpServletRequest, String) - Static method in class com.atlassian.seraph.util.RedirectUtils

Checks whether the request contains a basicAuth parameter in its queryString

isInsecureCookie() - Method in interface com.atlassian.seraph.config.SecurityConfig

isInsecureCookie() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

isSecurityEnabled() - Method in class com.atlassian.seraph.controller.NullSecurityController

isSecurityEnabled() - Method in interface com.atlassian.seraph.controller.SecurityController

isUserInRole(HttpServletRequest, String) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

Deprecated. Use RoleMapper directly

isUserInRole(HttpServletRequest, String) - Method in interface com.atlassian.seraph.auth.Authenticator

Deprecated. Use RoleMapper directly

isUserInRole(HttpServletRequest, String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Deprecated. Use RoleMapper directly

L

LOGGED_IN_KEY - Static variable in class com.atlassian.seraph.auth.DefaultAuthenticator

The key used to store the user object in the session

LOGGED_OUT_KEY - Static variable in class com.atlassian.seraph.auth.DefaultAuthenticator

The key used to indicate that the user has logged out and session regarding of it containing a cookie is not logged in.

LOGIN_ERROR - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_FAILED - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_NOATTEMPT - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_SUCCESS - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

ListApplicationRetriever - class com.atlassian.security.auth.trustedapps.ListApplicationRetriever.

LoginFilter - class com.atlassian.seraph.filter.LoginFilter.

This is a filter that logs the user in.

LoginFilter() - Constructor for class com.atlassian.seraph.filter.LoginFilter

LoginInterceptor - interface com.atlassian.seraph.interceptor.LoginInterceptor.

Allows interception of logins.

LoginUrlStrategy - interface com.atlassian.seraph.config.LoginUrlStrategy.

Strategy for programatically overriding the SecurityConfig's default login/logout URL configuration.

LogoutInterceptor - interface com.atlassian.seraph.interceptor.LogoutInterceptor.

Implement this interface to intercept logout methods.

LogoutServlet - class com.atlassian.seraph.logout.LogoutServlet.

Seraph logout servlet.

LogoutServlet() - Constructor for class com.atlassian.seraph.logout.LogoutServlet

login(HttpServletRequest, HttpServletResponse, String, String) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

login(HttpServletRequest, HttpServletResponse, String, String) - Method in interface com.atlassian.seraph.auth.Authenticator

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in interface com.atlassian.seraph.auth.Authenticator

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Tries to authenticate a user (via OSUser).

login(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Performs the actual authentication (if required) and returns the status code.

login(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.PasswordBasedLoginFilter

logout(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

logout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.auth.Authenticator

logout(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

M

MAGIC - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Constant

Magic number used to validate successful decryption.

MAGIC - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request

Header name for magic number for decryption validation

MAGIC_NUMBER_NOT_FOUND - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

MISSING_CERT - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

main(String[]) - Static method in class com.atlassian.seraph.util.EncryptionUtils

match(String) - Method in class com.atlassian.security.auth.trustedapps.DefaultIPMatcher

match(String) - Method in class com.atlassian.security.auth.trustedapps.DefaultURLMatcher

returns true if the given URL starts with one of the given patterns and false otherwise

match(String) - Method in interface com.atlassian.security.auth.trustedapps.IPMatcher

check if this IP is allowed to perform trusted calls.

match(String) - Method in interface com.atlassian.security.auth.trustedapps.URLMatcher

Check if this URL path is allowed to be accessed by trusted calls

N

NULL_CONTROLLER - Static variable in interface com.atlassian.seraph.controller.SecurityController

Null - class com.atlassian.security.auth.trustedapps.Null.

NullSecurityController - class com.atlassian.seraph.controller.NullSecurityController.

The default Seraph controller implementation will always enable security.

NullSecurityController() - Constructor for class com.atlassian.seraph.controller.NullSecurityController

not(String, Object) - Static method in class com.atlassian.security.auth.trustedapps.Null

O

OLD_CERT - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

ORIGINAL_URL - Static variable in class com.atlassian.seraph.filter.SecurityFilter

OS_AUTHSTATUS_KEY - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

OS_COOKIE - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_DESTINATION - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_PASSWORD - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_USERNAME - Static variable in class com.atlassian.seraph.RequestParameterConstants

P

PERMISSION_DENIED - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

PasswordBasedLoginFilter - class com.atlassian.seraph.filter.PasswordBasedLoginFilter.

This is a base filter that logs the user in based on the given username and password.

PasswordBasedLoginFilter() - Constructor for class com.atlassian.seraph.filter.PasswordBasedLoginFilter

PasswordBasedLoginFilter.UserPasswordPair - class com.atlassian.seraph.filter.PasswordBasedLoginFilter.UserPasswordPair.

represents a username password pair of user credentials.

PathMapper - class com.atlassian.seraph.util.PathMapper.

The PathMapper is used to map file patterns to keys, and find an approriate key for a given file path.

PathMapper() - Constructor for class com.atlassian.seraph.util.PathMapper

PathService - class com.atlassian.seraph.service.PathService.

Configures Seraph to require certain roles to access certain URL paths.

PathService() - Constructor for class com.atlassian.seraph.service.PathService

parseError(String) - Static method in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils

Get a TransportErrorMessage from the TrustedApplicationUtils.Header.Response.ERROR header.

parseRoles(String) - Method in class com.atlassian.seraph.service.PathService

privateKey - Variable in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

publicKey - Variable in class com.atlassian.security.auth.trustedapps.DefaultCurrentApplication

publicKey - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

put(String, String) - Method in class com.atlassian.seraph.util.CachedPathMapper

put(String, String) - Method in class com.atlassian.seraph.util.PathMapper

Add a key and appropriate matching pattern.

R

ReaderApplicationRetriever - class com.atlassian.security.auth.trustedapps.ReaderApplicationRetriever.

Take a Reader and produce an Application.

ReaderApplicationRetriever(Reader, EncryptionProvider) - Constructor for class com.atlassian.security.auth.trustedapps.ReaderApplicationRetriever

RedirectUtils - class com.atlassian.seraph.util.RedirectUtils.

Utilities for login link redirection.

RedirectUtils() - Constructor for class com.atlassian.seraph.util.RedirectUtils

RequestParameterConstants - class com.atlassian.seraph.RequestParameterConstants.

This is used to reference constant strings used as request parameters names.

RequestParameterConstants() - Constructor for class com.atlassian.seraph.RequestParameterConstants

RequestValidator - interface com.atlassian.security.auth.trustedapps.RequestValidator.

Validate whether a request is allowed or not.

RoleMapper - interface com.atlassian.seraph.auth.RoleMapper.

Determines whether an authenticated user has a "role" (permission) within the system, and specifically, whether they have permission to log in to the system.

redirectToOriginalDestination(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Redirect the response to the original destination if present

requestValidator - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplication

resolve(ApplicationCertificate) - Method in interface com.atlassian.security.auth.trustedapps.UserResolver

Returns the user that made this request or null if this application does not have such a user.

roleMapper - Variable in class com.atlassian.seraph.config.SecurityConfigImpl

S

SECRET_KEY - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request

Header name for the secret key, used to encrypt the certificate.

SECRET_KEY_NOT_FOUND - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

STATUS - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Response

Header used to indicate the status of a response to a trusted app request

STORAGE_KEY - Static variable in interface com.atlassian.seraph.config.SecurityConfig

SYSTEM - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

SecurityConfig - interface com.atlassian.seraph.config.SecurityConfig.

SecurityConfigFactory - class com.atlassian.seraph.config.SecurityConfigFactory.

Factory for SecurityConfig instances.

SecurityConfigImpl - class com.atlassian.seraph.config.SecurityConfigImpl.

The main class of Seraph's configuration.

SecurityConfigImpl(String) - Constructor for class com.atlassian.seraph.config.SecurityConfigImpl

SecurityController - interface com.atlassian.seraph.controller.SecurityController.

The SecurityController allows users to plug in and out a 'controller' class which can enable or disable Seraph, based on some settings in their app.

SecurityFilter - class com.atlassian.seraph.filter.SecurityFilter.

The SecurityFilter determines which roles are required for a given request by querying all of the Services.

SecurityFilter() - Constructor for class com.atlassian.seraph.filter.SecurityFilter

SecurityService - interface com.atlassian.seraph.SecurityService.

A SecurityService determines which roles a user is required to have to access a resource.

SecurityUtils - class com.atlassian.seraph.util.SecurityUtils.

SecurityUtils() - Constructor for class com.atlassian.seraph.util.SecurityUtils

SimpleApplication - class com.atlassian.security.auth.trustedapps.SimpleApplication.

A simple data container

SimpleApplication(String, PublicKey) - Constructor for class com.atlassian.security.auth.trustedapps.SimpleApplication

SystemException - exception com.atlassian.security.auth.trustedapps.SystemException.

Used when something serious is wrong.

SystemException(String, Exception) - Constructor for class com.atlassian.security.auth.trustedapps.SystemException

service(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.logout.LogoutServlet

services - Variable in class com.atlassian.seraph.config.SecurityConfigImpl

setCookie(HttpServletRequest, HttpServletResponse, String, String, int, String) - Method in interface com.atlassian.seraph.cookie.CookieHandler

Sets a cookie This will also put the cookie in a list of cookies to send with this request's response (so that in case of a redirect occurring down the chain, the first filter will always try to set this cookie again) The cookie secure flag is set if the request is secure.

setCookie(HttpServletRequest, HttpServletResponse, String, String, int, String) - Method in class com.atlassian.seraph.cookie.DefaultCookieHandler

setCookie(HttpServletRequest, HttpServletResponse, String, String, int, String) - Static method in class com.atlassian.seraph.util.CookieUtils

Deprecated. Since 0.10, use CookieHandler instead

setCookieEncoder(CookieEncoder) - Static method in class com.atlassian.seraph.cookie.CookieFactory

setCookieHandler(CookieHandler) - Static method in class com.atlassian.seraph.cookie.CookieFactory

setFilterConfig(FilterConfig) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Deprecated. Not needed in latest version of Servlet 2.3 API - replaced by init().

setFilterConfig(FilterConfig) - Method in class com.atlassian.seraph.filter.SecurityFilter

Deprecated. Not needed in latest version of Servlet 2.3 API - replaced by init().

setFilterConfig(FilterConfig) - Method in class com.atlassian.seraph.filter.TrustedApplicationsFilter

Deprecated. Not needed in latest version of Servlet 2.3 API - replaced by init().

setPassword(String) - Method in class com.atlassian.seraph.util.EncryptionUtils

setSecurityConfig(SecurityConfig) - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Set the SecurityConfig instance to return.

setUser(Principal) - Method in interface com.atlassian.seraph.auth.AuthenticationContext

setUser(Principal) - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

T

Transcoder.Base64Transcoder - class com.atlassian.security.auth.trustedapps.Transcoder.Base64Transcoder.

Standard implemetation.

Transcoder.Base64Transcoder() - Constructor for class com.atlassian.security.auth.trustedapps.Transcoder.Base64Transcoder

TransportErrorMessage - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.

TransportErrorMessages are reported when a client makes a TrustedApplication request.

TransportErrorMessage.ApplicationIdNotFoundInRequest - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.ApplicationIdNotFoundInRequest.

AppId not found in request

TransportErrorMessage.ApplicationIdNotFoundInRequest() - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.ApplicationIdNotFoundInRequest

TransportErrorMessage.ApplicationUnknown - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.ApplicationUnknown.

TransportErrorMessage.ApplicationUnknown(String) - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.ApplicationUnknown

TransportErrorMessage.BadProtocolVersion - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.BadProtocolVersion.

TransportErrorMessage.BadProtocolVersion(String) - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.BadProtocolVersion

TransportErrorMessage.Code - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code.

Typesafe enum that contains all known error codes.

TransportErrorMessage.Code.Severity - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code.Severity.

TransportErrorMessage.MagicNumberNotFoundInRequest - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.MagicNumberNotFoundInRequest.

TransportErrorMessage.MagicNumberNotFoundInRequest() - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.MagicNumberNotFoundInRequest

TransportErrorMessage.PermissionDenied - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.PermissionDenied.

TransportErrorMessage.PermissionDenied() - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.PermissionDenied

TransportErrorMessage.SecretKeyNotFoundInRequest - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.SecretKeyNotFoundInRequest.

TransportErrorMessage.SecretKeyNotFoundInRequest() - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.SecretKeyNotFoundInRequest

TransportErrorMessage.UserUnknown - class com.atlassian.security.auth.trustedapps.TransportErrorMessage.UserUnknown.

TransportErrorMessage.UserUnknown(String) - Constructor for class com.atlassian.security.auth.trustedapps.TransportErrorMessage.UserUnknown

TransportException - exception com.atlassian.security.auth.trustedapps.TransportException.

TrustedApplication - interface com.atlassian.security.auth.trustedapps.TrustedApplication.

Represents a trusted remote application.

TrustedApplicationUtils - class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.

Utility class for trusted applications

TrustedApplicationUtils() - Constructor for class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils

TrustedApplicationUtils.Constant - class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Constant.

Used in Request/Response Header values for validating the capabilites of the client/server.

TrustedApplicationUtils.Header - class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.

Request/Response header parameters

TrustedApplicationUtils.Header.Request - class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request.

TrustedApplicationUtils.Header.Response - class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Response.

TrustedApplicationsFilter - class com.atlassian.seraph.filter.TrustedApplicationsFilter.

This filter serves two purposes: 1.

TrustedApplicationsFilter(TrustedApplicationsManager, UserResolver) - Constructor for class com.atlassian.seraph.filter.TrustedApplicationsFilter

TrustedApplicationsFilter(TrustedApplicationsManager, UserResolver, RoleMapper) - Constructor for class com.atlassian.seraph.filter.TrustedApplicationsFilter

TrustedApplicationsFilter.Authenticator.Result - class com.atlassian.seraph.filter.TrustedApplicationsFilter.Authenticator.Result.

TrustedApplicationsManager - interface com.atlassian.security.auth.trustedapps.TrustedApplicationsManager.

A container for trusted application representations.

TrustedRequest - interface com.atlassian.security.auth.trustedapps.request.TrustedRequest.

This represent a request made with trusted

toPrivateKey(byte[]) - Method in class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

Decodes the given form into the real key object according to the given algorithm Uses Bouncy Castle as a provider

toPrivateKey(byte[]) - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Convert an encoded private key into a PrivateKey instance

toPublicKey(byte[]) - Method in class com.atlassian.security.auth.trustedapps.BouncyCastleEncryptionProvider

Decodes the given form into the real key object according to the given algorithm Uses Bouncy Castle as a provider

toPublicKey(byte[]) - Method in interface com.atlassian.security.auth.trustedapps.EncryptionProvider

Convert an encoded public key into a PublicKey instance

toString() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code.Severity

toString() - Method in class com.atlassian.security.auth.trustedapps.TransportErrorMessage

String representation of a TransportErrorMessage.

toString() - Method in class com.atlassian.seraph.util.PathMapper

trustedApps - Variable in class com.atlassian.security.auth.trustedapps.DefaultTrustedApplicationsManager

U

UIDGenerator - class com.atlassian.security.auth.trustedapps.UIDGenerator.

Utility class for UID generation.

UIDGenerator() - Constructor for class com.atlassian.security.auth.trustedapps.UIDGenerator

UNKNOWN - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

URLApplicationRetriever - class com.atlassian.security.auth.trustedapps.URLApplicationRetriever.

Take a URL and produce an Application.

URLApplicationRetriever(String, EncryptionProvider) - Constructor for class com.atlassian.security.auth.trustedapps.URLApplicationRetriever

URLMatcher - interface com.atlassian.security.auth.trustedapps.URLMatcher.

Checks whether the supplied url path (after the context) is valid.

USER_UNKNOWN - Static variable in class com.atlassian.security.auth.trustedapps.TransportErrorMessage.Code

UserResolver - interface com.atlassian.security.auth.trustedapps.UserResolver.

Given the trusted application certificate this object will lookup the Principal that made this request

V

VERSION - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Constant

The protocol version.

VERSION - Static variable in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils.Header.Request

Header name for trusted application protocol version

validate(HttpServletRequest) - Method in class com.atlassian.security.auth.trustedapps.DefaultRequestValidator

validate(HttpServletRequest) - Method in interface com.atlassian.security.auth.trustedapps.RequestValidator

Check if this URL is allowed to be accessed by trusted calls

validateMagicNumber(String, String, Integer, String) - Static method in class com.atlassian.security.auth.trustedapps.TrustedApplicationUtils

W

WebworkService - class com.atlassian.seraph.service.WebworkService.

Configures Seraph based on WebWork 1.x configuration file actions.xml.

WebworkService() - Constructor for class com.atlassian.seraph.service.WebworkService

X

XMLUtils - class com.atlassian.seraph.util.XMLUtils.

Some basic XML utility methods used by Seraph.

XMLUtils() - Constructor for class com.atlassian.seraph.util.XMLUtils

A B C D E G H I L M N O P R S T U V W X