A B C D E F G H I L N O P R S T U V W X

A

AbstractAuthenticator - Class in com.atlassian.seraph.auth

An abstract implementation of Authenticator that implements a lot of base methods

AbstractAuthenticator() - Constructor for class com.atlassian.seraph.auth.AbstractAuthenticator

addInterceptor(Interceptor) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

Do not use in production! Only used in tests, will be removed.

addRememberMeCookie(HttpServletRequest, HttpServletResponse, String) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeService

addRememberMeCookie(HttpServletRequest, HttpServletResponse, String) - Method in class com.atlassian.seraph.service.rememberme.NoopRememberMeService

addRememberMeCookie(HttpServletRequest, HttpServletResponse, String) - Method in interface com.atlassian.seraph.service.rememberme.RememberMeService

This can be called to generate and save a remember me cookie with the application and send it back to the client

afterLogin(HttpServletRequest, HttpServletResponse, String, String, boolean, String) - Method in interface com.atlassian.seraph.interceptor.LoginInterceptor

afterLogout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.interceptor.LogoutInterceptor

allowedRedirectDestination(String, HttpServletRequest) - Method in class com.atlassian.seraph.config.DefaultRedirectPolicy

Checks if the given redirectURL is permitted.

allowedRedirectDestination(String, HttpServletRequest) - Method in interface com.atlassian.seraph.config.RedirectPolicy

Returns true if we are allowed to redirect to the given URL from the given HTTP request.

appendPathToContext(String, String) - Static method in class com.atlassian.seraph.util.RedirectUtils

Appends the path to the context, dealing with any missing slashes properly.

ApplicationServicesRegistry - Class in com.atlassian.seraph.ioc

This class represents an extension point for Seraph.

ApplicationServicesRegistry() - Constructor for class com.atlassian.seraph.ioc.ApplicationServicesRegistry

authenticate(Principal, String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Authenticates the given user and password.

AUTHENTICATION_ERROR_TYPE - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

AuthenticationContext - Interface in com.atlassian.seraph.auth

Allow the user to be retrieved at any time throughout the application.

AuthenticationContextAwareAuthenticator - Annotation Type in com.atlassian.seraph.auth

Indicates that this authenticator stores the user in the AuthenticationContext and does not rely on the old behavior of com.atlassian.seraph.filter.BaseLoginFilter.SecurityHttpRequestWrapper.getRemoteUser()

AuthenticationContextImpl - Class in com.atlassian.seraph.auth

AuthenticationContextImpl() - Constructor for class com.atlassian.seraph.auth.AuthenticationContextImpl

AuthenticationErrorType - Enum in com.atlassian.seraph.auth

Enumeration used to determine the cause of any authentication errors.

Authenticator - Interface in com.atlassian.seraph.auth

An Authenticator is used to authenticate users, log them in, log them out and check their roles.

AuthenticatorException - Exception in com.atlassian.seraph.auth

An exception for all Authenticator related error conditions

AuthenticatorException() - Constructor for exception com.atlassian.seraph.auth.AuthenticatorException

AuthenticatorException(String) - Constructor for exception com.atlassian.seraph.auth.AuthenticatorException

AuthenticatorException(AuthenticationErrorType) - Constructor for exception com.atlassian.seraph.auth.AuthenticatorException

authoriseUserAndEstablishSession(HttpServletRequest, HttpServletResponse, Principal) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This is called to authorise the user with the application.

AuthType - Enum in com.atlassian.seraph.auth

If an authType is specified by the user that doesn't match a specific auth type as defined by this enum, 'NONE' will be returned.

B

BaseLoginFilter - Class in com.atlassian.seraph.filter

This is a base authentication filter.

BaseLoginFilter() - Constructor for class com.atlassian.seraph.filter.BaseLoginFilter

BASIC_AUTH - Static variable in interface com.atlassian.seraph.config.SecurityConfig

beforeLogin(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in interface com.atlassian.seraph.interceptor.LoginInterceptor

beforeLogout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.interceptor.LogoutInterceptor

build() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

builder(Long, String) - Static method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

builder(String) - Static method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

builder(RememberMeToken) - Static method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

Builder(RememberMeToken) - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

Builder(Long, String) - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

Builder(String) - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

C

CachedPathMapper - Class in com.atlassian.seraph.util

Caches the results of the PathMapper

CachedPathMapper() - Constructor for class com.atlassian.seraph.util.CachedPathMapper

Creates a CachedPathMapper object that will cache the results of the CachedPathMapper.get(String) and the CachedPathMapper.getAll(String) calls.

CachedPathMapper(ConcurrentMap<String, String>, ConcurrentMap<String, Collection<String>>) - Constructor for class com.atlassian.seraph.util.CachedPathMapper

Creates a CachedPathMapper object that will use cacheMap to cache the results of the CachedPathMapper.get(String) calls and cacheAllMap to cache the results of the CachedPathMapper.getAll(String) class.

canLogin(Principal, HttpServletRequest) - Method in interface com.atlassian.seraph.auth.RoleMapper

canLogin(Principal, HttpServletRequest) - Method in class com.atlassian.seraph.auth.SimpleAbstractRoleMapper

In the SimpleAbstractRoleMapper implementation, Users can login if they exist.

clearUser() - Method in interface com.atlassian.seraph.auth.AuthenticationContext

clearUser() - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

com.atlassian.seraph - package com.atlassian.seraph

com.atlassian.seraph.auth - package com.atlassian.seraph.auth

com.atlassian.seraph.config - package com.atlassian.seraph.config

com.atlassian.seraph.controller - package com.atlassian.seraph.controller

com.atlassian.seraph.elevatedsecurity - package com.atlassian.seraph.elevatedsecurity

com.atlassian.seraph.filter - package com.atlassian.seraph.filter

com.atlassian.seraph.interceptor - package com.atlassian.seraph.interceptor

com.atlassian.seraph.ioc - package com.atlassian.seraph.ioc

com.atlassian.seraph.logout - package com.atlassian.seraph.logout

com.atlassian.seraph.service - package com.atlassian.seraph.service

com.atlassian.seraph.service.rememberme - package com.atlassian.seraph.service.rememberme

com.atlassian.seraph.spi.rememberme - package com.atlassian.seraph.spi.rememberme

com.atlassian.seraph.util - package com.atlassian.seraph.util

ConfigurationException - Exception in com.atlassian.seraph.config

Exception thrown during Seraph configuration.

ConfigurationException(String) - Constructor for exception com.atlassian.seraph.config.ConfigurationException

ConfigurationException(String, Throwable) - Constructor for exception com.atlassian.seraph.config.ConfigurationException

configureRedirectPolicy(Element) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

D

decodeBasicAuthorizationCredentials(String) - Static method in class com.atlassian.seraph.util.SecurityUtils

Extracts the username and password from the given header string (including the 'Basic ' prefix).

DEFAULT_ATTRIBUTE - Static variable in enum com.atlassian.seraph.auth.AuthType

DEFAULT_CONFIG_LOCATION - Static variable in class com.atlassian.seraph.config.SecurityConfigImpl

DefaultAuthenticator - Class in com.atlassian.seraph.auth

This authenticator stores the currently logged in user in the session as a Principal.

DefaultAuthenticator() - Constructor for class com.atlassian.seraph.auth.DefaultAuthenticator

DefaultLoginUrlStrategy - Class in com.atlassian.seraph.config

Login URL strategy that just returns the originally configured values.

DefaultLoginUrlStrategy() - Constructor for class com.atlassian.seraph.config.DefaultLoginUrlStrategy

DefaultRedirectPolicy - Class in com.atlassian.seraph.config

DefaultRedirectPolicy() - Constructor for class com.atlassian.seraph.config.DefaultRedirectPolicy

DefaultRememberMeConfiguration - Class in com.atlassian.seraph.service.rememberme

This default implementation of RememberMeConfiguration

DefaultRememberMeConfiguration() - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

DefaultRememberMeConfiguration(SecurityConfig) - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

DefaultRememberMeService - Class in com.atlassian.seraph.service.rememberme

This default RememberMeService needs to have a certain SPI implementations into it so that it can function.

DefaultRememberMeService(RememberMeConfiguration, RememberMeTokenDao, RememberMeTokenGenerator) - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeService

DefaultRememberMeToken - Class in com.atlassian.seraph.service.rememberme

An implementation of RememberMeToken that should be suitable for most apps Have a look at the DefaultRememberMeToken.builder(String) methods to see how you can costruct them easily enough

DefaultRememberMeToken.Builder - Class in com.atlassian.seraph.service.rememberme

DefaultRememberMeTokenGenerator - Class in com.atlassian.seraph.service.rememberme

A default implementation of RememberMeTokenGenerator that should be enough for most apps

DefaultRememberMeTokenGenerator() - Constructor for class com.atlassian.seraph.service.rememberme.DefaultRememberMeTokenGenerator

destroy() - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

destroy() - Method in interface com.atlassian.seraph.auth.Authenticator

destroy() - Method in interface com.atlassian.seraph.config.SecurityConfig

destroy() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

destroy() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

destroy() - Method in class com.atlassian.seraph.filter.SecurityFilter

destroy() - Method in interface com.atlassian.seraph.interceptor.Interceptor

destroy() - Method in interface com.atlassian.seraph.SecurityService

destroy() - Method in class com.atlassian.seraph.service.PathService

destroy() - Method in class com.atlassian.seraph.service.WebworkService

disableSeraphFiltering(ServletRequest) - Static method in class com.atlassian.seraph.util.SecurityUtils

Disables seraph filtering

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class com.atlassian.seraph.filter.SecurityFilter

E

ElevatedSecurityGuard - Interface in com.atlassian.seraph.elevatedsecurity

An ElevatedSecurityGaurd is responsible for checking whether a user has failed authentication too many times and hence needs to pass an "elevated" security check before they can authenticate again.

encodeBasicAuthorizationCredentials(String, String) - Static method in class com.atlassian.seraph.util.SecurityUtils

Reverses the operation of decodeBasicAuthorizationCredentials.

extractUserPasswordPair(HttpServletRequest) - Method in class com.atlassian.seraph.filter.HttpAuthFilter

extractUserPasswordPair(HttpServletRequest) - Method in class com.atlassian.seraph.filter.LoginFilter

extractUserPasswordPair(HttpServletRequest) - Method in class com.atlassian.seraph.filter.PasswordBasedLoginFilter

Returns a username password pair for this request.

F

findById(Long) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

Finds the token with the given id.

findForUserName(String) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

This will return a list of the RememberMeToken that a user currently has.

G

generateToken(String) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeTokenGenerator

generateToken(String) - Method in interface com.atlassian.seraph.service.rememberme.RememberMeTokenGenerator

The RememberMeToken returned will have the user name and random string set

get(String) - Method in class com.atlassian.seraph.util.CachedPathMapper

get(String) - Method in interface com.atlassian.seraph.util.IPathMapper

Retrieve appropriate key by matching patterns with supplied path.

get(String) - Method in class com.atlassian.seraph.util.PathMapper

getAll(String) - Method in class com.atlassian.seraph.util.CachedPathMapper

getAll(String) - Method in interface com.atlassian.seraph.util.IPathMapper

Retrieve all mappings which match a supplied path.

getAll(String) - Method in class com.atlassian.seraph.util.PathMapper

getAuthenticationContext() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthenticationContext() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthenticationContext() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getAuthenticationContext() - Method in class com.atlassian.seraph.filter.SecurityFilter

getAuthenticationErrorType(HttpServletRequest) - Static method in class com.atlassian.seraph.filter.LoginFilterRequest

Returns the authentication error type set by the LoginFilter as a request Attribute.

getAuthenticationStatus(HttpServletRequest) - Static method in class com.atlassian.seraph.filter.LoginFilterRequest

Returns the authentication status code set by the LoginFilter as a request Attribute.

getAuthenticator() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthenticator() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthenticator() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getAuthenticator() - Method in class com.atlassian.seraph.logout.LogoutServlet

getAuthenticator(ServletContext) - Static method in class com.atlassian.seraph.util.SecurityUtils

getAuthType() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getAuthType() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAuthType() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getAuthTypeInformation(HttpServletRequest, SecurityConfig) - Static method in enum com.atlassian.seraph.auth.AuthType

getAutoLoginCookieAge() - Method in interface com.atlassian.seraph.config.SecurityConfig

getAutoLoginCookieAge() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getConfig() - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getContainedText(Node, String) - Static method in class com.atlassian.seraph.util.XMLUtils

With a given parent XML Element, find the text contents of the child element with supplied name.

getController() - Method in interface com.atlassian.seraph.config.SecurityConfig

getController() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getCookieDomain(HttpServletRequest) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

getCookieDomain(HttpServletRequest) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

getCookieMaxAgeInSeconds() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

getCookieMaxAgeInSeconds() - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

getCookieName() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

getCookieName() - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

getCookiePath(HttpServletRequest) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

getCookiePath(HttpServletRequest) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

getCreatedTime() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

getCreatedTime() - Method in interface com.atlassian.seraph.service.rememberme.RememberMeToken

getElevatedSecurityGuard() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getElevatedSecurityGuard() - Method in interface com.atlassian.seraph.config.SecurityConfig

getElevatedSecurityGuard() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getElevatedSecurityGuard() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getErrorType() - Method in exception com.atlassian.seraph.auth.AuthenticatorException

getId() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

getId() - Method in interface com.atlassian.seraph.service.rememberme.RememberMeToken

getInstance() - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Get a SecurityConfig instance.

getInstance(String) - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Get a SecurityConfig instance.

getInterceptors(Class<T>) - Method in interface com.atlassian.seraph.config.SecurityConfig

getInterceptors(Class<T>) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getInvalidateSessionExcludeList() - Method in interface com.atlassian.seraph.config.SecurityConfig

When sessions are invalidated upon login, sometimes there are session attributes that should be excluded from the new session.

getInvalidateSessionExcludeList() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getInvalidateWebsudoSessionExcludeList() - Method in interface com.atlassian.seraph.config.SecurityConfig

When sessions are invalidated upon websudo, sometimes there are session attributes that should be excluded from the new session.

getInvalidateWebsudoSessionExcludeList() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLinkLoginURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLinkLoginURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLinkLoginURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLinkLoginURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLinkLoginURL(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Returns a login URL that would log the user in to access resource indicated by request.

getLoginCookieKey() - Method in interface com.atlassian.seraph.config.SecurityConfig

The name of the remember me cookie

getLoginCookieKey() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginCookiePath() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginCookiePath() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginForwardPath() - Method in interface com.atlassian.seraph.config.SecurityConfig

Returns the login forward path.

getLoginForwardPath() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLoginURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLoginURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginURL(boolean, boolean) - Method in interface com.atlassian.seraph.config.SecurityConfig

getLoginURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginURL(boolean, boolean) - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getLoginUrl(HttpServletRequest, Set<String>) - Method in class com.atlassian.seraph.filter.SecurityFilter

getLoginUrl(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Returns a login URL that would log the user in to access resource indicated by request.

getLoginURL(String, HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

getLogoutInterceptors() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getLogoutURL(SecurityConfig, String) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

getLogoutURL(SecurityConfig, String) - Method in interface com.atlassian.seraph.config.LoginUrlStrategy

getLogoutURL() - Method in interface com.atlassian.seraph.config.SecurityConfig

getLogoutURL() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getName() - Method in class com.atlassian.seraph.util.ServerInformationParser.ServerInformation

getOriginalURLKey() - Method in interface com.atlassian.seraph.config.SecurityConfig

getOriginalURLKey() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getOtherInformation() - Method in class com.atlassian.seraph.util.ServerInformationParser.ServerInformation

getPassword() - Method in class com.atlassian.seraph.util.SecurityUtils.UserPassCredentials

getRandomString() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

getRandomString() - Method in interface com.atlassian.seraph.service.rememberme.RememberMeToken

getRedirectPolicy() - Method in interface com.atlassian.seraph.config.SecurityConfig

Returns the configured RedirectPolicy, or the default if none is configured.

getRedirectPolicy() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getRememberMeCookieAuthenticatedUsername(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeService

getRememberMeCookieAuthenticatedUsername(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.service.rememberme.NoopRememberMeService

getRememberMeCookieAuthenticatedUsername(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.service.rememberme.RememberMeService

This method can be called to try and authenticate a user name from a remember me cookie.

getRememberMeService() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

getRememberMeService() - Method in interface com.atlassian.seraph.config.SecurityConfig

getRememberMeService() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getRememberMeService() - Static method in class com.atlassian.seraph.ioc.ApplicationServicesRegistry

Returns a RememberMeService that was set by an application via ApplicationServicesRegistry.setRememberMeService(RememberMeService) or a NoopRememberMeService if application has not set one.

getRemoteUser(HttpServletRequest) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getRemoteUser(HttpServletRequest) - Method in interface com.atlassian.seraph.auth.Authenticator

Gets the username of the Principal authenticated for the given HttpServletRequest.

getRequiredRoles(HttpServletRequest) - Method in interface com.atlassian.seraph.SecurityService

getRequiredRoles(HttpServletRequest) - Method in class com.atlassian.seraph.service.PathService

getRequiredRoles(String) - Method in class com.atlassian.seraph.service.PathService

getRequiredRoles(HttpServletRequest) - Method in class com.atlassian.seraph.service.WebworkService

getRoleMapper() - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

override this method if you need to retrieve the role mapper from elsewhere than the singleton-factory (injected dependency for instance)

getRoleMapper() - Method in interface com.atlassian.seraph.config.SecurityConfig

getRoleMapper() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getSecurityConfig() - Method in class com.atlassian.seraph.filter.BaseLoginFilter

getSecurityConfig() - Method in class com.atlassian.seraph.filter.SecurityFilter

getSecurityConfig() - Method in class com.atlassian.seraph.logout.LogoutServlet

getServerNameAndPath(HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Reconstruct the context part of a request URL from a HttpServletRequest.

getServices() - Method in interface com.atlassian.seraph.config.SecurityConfig

getServices() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

getUser(HttpServletRequest) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getUser(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

getUser() - Method in interface com.atlassian.seraph.auth.AuthenticationContext

getUser() - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

getUser(HttpServletRequest) - Method in interface com.atlassian.seraph.auth.Authenticator

Gets the Principal authenticated for the given HttpServletRequest.

getUser(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.auth.Authenticator

Gets the Principal for the HttpServletRequest.

getUser(String) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Retrieve a Principal for the given username.

getUser(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Returns the currently logged in user, trying in order:

getUserFromBasicAuthentication(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Checks the Authorization header to see whether basic auth token is provided.

getUserFromCookie(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Extracts the username and password from the cookie and calls login to authenticate, and if successful store the token in the session.

getUserFromSession(HttpServletRequest) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Tries to get a logged in user from the session.

getUserName() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken

getUserName() - Method in interface com.atlassian.seraph.service.rememberme.RememberMeToken

getUsername() - Method in class com.atlassian.seraph.util.SecurityUtils.UserPassCredentials

getVersion() - Method in class com.atlassian.seraph.util.ServerInformationParser.ServerInformation

getWebsudoRequestKey() - Method in interface com.atlassian.seraph.config.SecurityConfig

The name of the websudo request

getWebsudoRequestKey() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

H

hasRole(Principal, HttpServletRequest, String) - Method in interface com.atlassian.seraph.auth.RoleMapper

HttpAuthFilter - Class in com.atlassian.seraph.filter

This is a filter that logs the user in.

HttpAuthFilter() - Constructor for class com.atlassian.seraph.filter.HttpAuthFilter

I

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.auth.SimpleAbstractRoleMapper

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.config.DefaultLoginUrlStrategy

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.config.DefaultRedirectPolicy

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.controller.NullSecurityController

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.elevatedsecurity.NoopElevatedSecurityGuard

init(FilterConfig) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

init(FilterConfig) - Method in class com.atlassian.seraph.filter.LoginFilter

init(FilterConfig) - Method in class com.atlassian.seraph.filter.SecurityFilter

init(Map<String, String>, SecurityConfig) - Method in interface com.atlassian.seraph.Initable

Initialise the configuration object with the given "init-params".

init() - Method in class com.atlassian.seraph.logout.LogoutServlet

init(ServletConfig) - Method in class com.atlassian.seraph.logout.LogoutServlet

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.service.PathService

Init the service - configure it from the config file

init(Map<String, String>, SecurityConfig) - Method in class com.atlassian.seraph.service.WebworkService

Initable - Interface in com.atlassian.seraph

A simple interface to indicate all initialisable configuration classes in Seraph.

INSTANCE - Static variable in class com.atlassian.seraph.elevatedsecurity.NoopElevatedSecurityGuard

A singleton instance of NoopElevatedSecurityGuard that does nothing!

INSTANCE - Static variable in class com.atlassian.seraph.service.rememberme.NoopRememberMeService

Interceptor - Interface in com.atlassian.seraph.interceptor

The base interface for Seraph interceptors.

invalidateSession(HttpServletRequest) - Method in class com.atlassian.seraph.auth.SessionInvalidator

If there is a session for the given request, invalidate it and create a new session, copying all attributes over except those configured exclusions.

IPathMapper - Interface in com.atlassian.seraph.util

The PathMapper is used to map file patterns to keys, and find an approriate key for a given file path.

isAbsoluteUrl(String) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

isAllowAnyUrl() - Method in class com.atlassian.seraph.config.DefaultRedirectPolicy

Returns true if we allow redirect to any URL at all.

isApacheTomcat() - Method in class com.atlassian.seraph.util.ServerInformationParser.ServerInformation

isAuthorised(HttpServletRequest, Principal) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This method is called to estblish if the principal is authorised to use the appliction url in play

isBasicAuthentication(HttpServletRequest, String) - Static method in class com.atlassian.seraph.util.RedirectUtils

Check whether the request authentication strategy is using HTTP Basic Authentication

isBasicAuthorizationHeader(String) - Static method in class com.atlassian.seraph.util.SecurityUtils

isCookieHttpOnly(HttpServletRequest) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

By default we take the conservative route and not use HttpOnly cookies.

isCookieHttpOnly(HttpServletRequest) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

If this is true than Seraph will make the remember me a HttpOnly cookie.

isInsecureCookie() - Method in interface com.atlassian.seraph.config.SecurityConfig

returns true if the remember me cookie should never be set to secure

isInsecureCookie() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

isInsecureCookieAlwaysUsed() - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

This app may needs to determine this.

isInsecureCookieAlwaysUsed() - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeConfiguration

See JRA-10508

isInvalidateSessionOnLogin() - Method in interface com.atlassian.seraph.config.SecurityConfig

Whether the session (and the JSESSIONID) should be thrown away and replaced on successful login to prevent session fixation.

isInvalidateSessionOnLogin() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

isInvalidateSessionOnWebsudo() - Method in interface com.atlassian.seraph.config.SecurityConfig

Whether the session (and the JSESSIONID) should be thrown away and replaced on successful websudo to prevent session fixation.

isInvalidateSessionOnWebsudo() - Method in class com.atlassian.seraph.config.SecurityConfigImpl

isPrincipalAlreadyInSessionContext(HttpServletRequest, Principal) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This is called to determine if the Principal is already in the HttpSession in a Seraph ready manner.

isSecurityEnabled() - Method in class com.atlassian.seraph.controller.NullSecurityController

isSecurityEnabled() - Method in interface com.atlassian.seraph.controller.SecurityController

isSeraphFilteringDisabled(ServletRequest) - Static method in class com.atlassian.seraph.util.SecurityUtils

Checks if Seraph filtering is disabled

isStamped(HttpServletRequest) - Method in enum com.atlassian.seraph.auth.LoginReason

Checks if the given request has been stamped with this login reason.

L

LOGGED_IN_KEY - Static variable in class com.atlassian.seraph.auth.DefaultAuthenticator

The key used to store the user object in the session

LOGGED_OUT_KEY - Static variable in class com.atlassian.seraph.auth.DefaultAuthenticator

The key used to indicate that the user has logged out and session regarding of it containing a cookie is not logged in.

login(HttpServletRequest, HttpServletResponse, String, String) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

login(HttpServletRequest, HttpServletResponse, String, String) - Method in interface com.atlassian.seraph.auth.Authenticator

Tries to authenticate a user.

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in interface com.atlassian.seraph.auth.Authenticator

Tries to authenticate a user.

login(HttpServletRequest, HttpServletResponse, String, String, boolean) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Tries to authenticate a user.

login(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Performs the actual authentication (if required) and returns the status code.

login(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.PasswordBasedLoginFilter

This implements the login method defined in BaseLoginFilter.login(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) and uses extracted user name and password to perform the check

LOGIN_ERROR - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_FAILED - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_NOATTEMPT - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LOGIN_SUCCESS - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

LoginFilter - Class in com.atlassian.seraph.filter

This is a filter that logs the user in.

LoginFilter() - Constructor for class com.atlassian.seraph.filter.LoginFilter

LoginFilterRequest - Class in com.atlassian.seraph.filter

Helper class to provide safe access to HTTP Request attributes set by the BaseLoginFilter.

LoginFilterRequest() - Constructor for class com.atlassian.seraph.filter.LoginFilterRequest

LoginInterceptor - Interface in com.atlassian.seraph.interceptor

Allows interception of logins.

LoginReason - Enum in com.atlassian.seraph.auth

An enumeration of why a login attempt has failed

LoginUrlStrategy - Interface in com.atlassian.seraph.config

Strategy for programatically overriding the SecurityConfig's default login/logout URL configuration.

logout(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.AbstractAuthenticator

logout(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.auth.Authenticator

logout(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

Called to remove the current principal from the HttpSession and will also to remove any remember me cookies that may be in effect.

LogoutInterceptor - Interface in com.atlassian.seraph.interceptor

Implement this interface to intercept logout methods.

LogoutServlet - Class in com.atlassian.seraph.logout

Seraph logout servlet.

LogoutServlet() - Constructor for class com.atlassian.seraph.logout.LogoutServlet

N

NoopElevatedSecurityGuard - Class in com.atlassian.seraph.elevatedsecurity

This ElevatedSecurityGuard does nothing, as its name might suggest

NoopRememberMeService - Class in com.atlassian.seraph.service.rememberme

A No Op implementation of RememberMeService

NULL_CONTROLLER - Static variable in interface com.atlassian.seraph.controller.SecurityController

NullSecurityController - Class in com.atlassian.seraph.controller

The default Seraph controller implementation will always enable security.

NullSecurityController() - Constructor for class com.atlassian.seraph.controller.NullSecurityController

O

onFailedLoginAttempt(HttpServletRequest, String) - Method in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

This is called when a user fails a login check, either because they failed the elevated security check or they failed the more basic username and password check.

onFailedLoginAttempt(HttpServletRequest, String) - Method in class com.atlassian.seraph.elevatedsecurity.NoopElevatedSecurityGuard

onSuccessfulLoginAttempt(HttpServletRequest, String) - Method in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

This is called when a user passes a login check.

onSuccessfulLoginAttempt(HttpServletRequest, String) - Method in class com.atlassian.seraph.elevatedsecurity.NoopElevatedSecurityGuard

ORIGINAL_URL - Static variable in class com.atlassian.seraph.filter.SecurityFilter

OS_AUTHSTATUS_KEY - Static variable in class com.atlassian.seraph.filter.BaseLoginFilter

OS_COOKIE - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_DESTINATION - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_PASSWORD - Static variable in class com.atlassian.seraph.RequestParameterConstants

OS_USERNAME - Static variable in class com.atlassian.seraph.RequestParameterConstants

P

parse(String) - Static method in class com.atlassian.seraph.util.ServerInformationParser

Given a String in the expected format, returns parsed server information.

parseRoles(String) - Method in class com.atlassian.seraph.service.PathService

PasswordBasedLoginFilter - Class in com.atlassian.seraph.filter

This is a base filter that logs the user in based on the given username and password.

PasswordBasedLoginFilter() - Constructor for class com.atlassian.seraph.filter.PasswordBasedLoginFilter

PasswordBasedLoginFilter.UserPasswordPair - Class in com.atlassian.seraph.filter

Represents a username password pair of user credentials.

PathMapper - Class in com.atlassian.seraph.util

PathMapper() - Constructor for class com.atlassian.seraph.util.PathMapper

PathService - Class in com.atlassian.seraph.service

Configures Seraph to require certain roles to access certain URL paths.

PathService() - Constructor for class com.atlassian.seraph.service.PathService

performElevatedSecurityCheck(HttpServletRequest, String) - Method in interface com.atlassian.seraph.elevatedsecurity.ElevatedSecurityGuard

This will be called to perform an elevated security check for a given user name.

performElevatedSecurityCheck(HttpServletRequest, String) - Method in class com.atlassian.seraph.elevatedsecurity.NoopElevatedSecurityGuard

put(String, String) - Method in class com.atlassian.seraph.util.CachedPathMapper

put(String, String) - Method in interface com.atlassian.seraph.util.IPathMapper

Add a key and appropriate matching pattern.

put(String, String) - Method in class com.atlassian.seraph.util.PathMapper

putPrincipalInSessionContext(HttpServletRequest, Principal) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This can be called to put the principal into the HttpSession in a Seraph ready manner

R

RedirectPolicy - Interface in com.atlassian.seraph.config

This interface is included to allow fine-grained control over what URLs Seraph will allow you to redirect to.

redirectToOriginalDestination(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.filter.BaseLoginFilter

Redirect the response to the original destination if present

RedirectUtils - Class in com.atlassian.seraph.util

Utilities for login link redirection.

RedirectUtils() - Constructor for class com.atlassian.seraph.util.RedirectUtils

refreshPrincipalObtainedFromSession(HttpServletRequest, Principal) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This is called to refresh the Principal object that has been retreived from the HTTP session.

RememberMeConfiguration - Interface in com.atlassian.seraph.spi.rememberme

This interface provides the information to allow the RememberMeService to know what the name of the remember me cookie could be and how old it should be made and what path it should be placed on and so on.

RememberMeService - Interface in com.atlassian.seraph.service.rememberme

The RememberMeService is the top level entry point for getting and setting remember me cookies

RememberMeToken - Interface in com.atlassian.seraph.service.rememberme

This interface describes the information about a remember me token

RememberMeTokenDao - Interface in com.atlassian.seraph.spi.rememberme

Each Seraph ready application needs to provide a spi Dao to hold and return remember me cookie information against a user.

RememberMeTokenGenerator - Interface in com.atlassian.seraph.service.rememberme

This can generate secure and very random RememberMeToken objects

remove(Long) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

Removes the specific token given the id

removeAll() - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

Can be called to remove all tokens for all users.

removeAllForUser(String) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

Called to remove ALL tokens that are stored for the specificed user

removePrincipalFromSessionContext(HttpServletRequest) - Method in class com.atlassian.seraph.auth.DefaultAuthenticator

This can be called to remove the principal into the HttpSession in a Seraph ready manner

removeRememberMeCookie(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeService

removeRememberMeCookie(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.service.rememberme.NoopRememberMeService

removeRememberMeCookie(HttpServletRequest, HttpServletResponse) - Method in interface com.atlassian.seraph.service.rememberme.RememberMeService

This will remove any remember me cookie that may have been presented by the client

REQUEST_ATTR_NAME - Static variable in enum com.atlassian.seraph.auth.LoginReason

The name of the request attribute set by Seraph to indicate how the login process went

RequestParameterConstants - Class in com.atlassian.seraph

This is used to reference constant strings used as request parameters names.

RequestParameterConstants() - Constructor for class com.atlassian.seraph.RequestParameterConstants

RoleMapper - Interface in com.atlassian.seraph.auth

Determines whether an authenticated user has a "role" (permission) within the system, and specifically, whether they have permission to log in to the system.

S

sameContext(String, HttpServletRequest) - Static method in class com.atlassian.seraph.util.RedirectUtils

Tests if a given (absolute) URL is in the same context as the incoming HttpServletRequest.

save(RememberMeToken) - Method in interface com.atlassian.seraph.spi.rememberme.RememberMeTokenDao

This will be called to save the presented token to the database against the specified user.

SecurityConfig - Interface in com.atlassian.seraph.config

Represents the configuration of Seraph.

SecurityConfigFactory - Class in com.atlassian.seraph.config

Factory for SecurityConfig instances.

SecurityConfigImpl - Class in com.atlassian.seraph.config

The main implementation of Seraph's configuration - reads from seraph-config.xml.

SecurityConfigImpl(String) - Constructor for class com.atlassian.seraph.config.SecurityConfigImpl

SecurityController - Interface in com.atlassian.seraph.controller

The SecurityController allows users to plug in and out a 'controller' class which can enable or disable Seraph, based on some settings in their app.

SecurityFilter - Class in com.atlassian.seraph.filter

The SecurityFilter determines which roles are required for a given request by querying all of the Services.

SecurityFilter() - Constructor for class com.atlassian.seraph.filter.SecurityFilter

SecurityService - Interface in com.atlassian.seraph

A SecurityService determines which roles a user is required to have to access a resource.

SecurityUtils - Class in com.atlassian.seraph.util

SecurityUtils() - Constructor for class com.atlassian.seraph.util.SecurityUtils

SecurityUtils.UserPassCredentials - Class in com.atlassian.seraph.util

User credentials including a username and a password.

ServerInformationParser - Class in com.atlassian.seraph.util

Parses ServletContext.getServerInfo() into separate pieces.

ServerInformationParser() - Constructor for class com.atlassian.seraph.util.ServerInformationParser

ServerInformationParser.ServerInformation - Class in com.atlassian.seraph.util

Holder for easily accessible information about a server.

service(HttpServletRequest, HttpServletResponse) - Method in class com.atlassian.seraph.logout.LogoutServlet

SessionInvalidator - Class in com.atlassian.seraph.auth

Invalidates and performs the manipulation of the session necessary to obtain a fresh JSESSIONID on Tomcat and the equivalent on other containers.

SessionInvalidator(List<String>) - Constructor for class com.atlassian.seraph.auth.SessionInvalidator

Create a session invalidator configured with the given exclusions.

set(Map<String, String>) - Method in class com.atlassian.seraph.util.CachedPathMapper

setAllowUrlParameterValue(boolean) - Method in class com.atlassian.seraph.filter.LoginFilter

Sets the value of allowUrlParameterValue.

setCreatedTime(long) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

setDisableLoggingDeprecationUrlParameterValue(boolean) - Method in class com.atlassian.seraph.filter.LoginFilter

Sets the value of disableLoggingDeprecationUrlParameterValue.

setId(Long) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

setRandomString(String) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

setRememberMeService(RememberMeService) - Static method in class com.atlassian.seraph.ioc.ApplicationServicesRegistry

This method provides the ability for a host application to set an implementation of RememberMeService for Seraph to use.

setSecurityConfig(SecurityConfig) - Static method in class com.atlassian.seraph.config.SecurityConfigFactory

Set the SecurityConfig instance to return.

setUser(Principal) - Method in interface com.atlassian.seraph.auth.AuthenticationContext

setUser(Principal) - Method in class com.atlassian.seraph.auth.AuthenticationContextImpl

setUserName(String) - Method in class com.atlassian.seraph.service.rememberme.DefaultRememberMeToken.Builder

SimpleAbstractRoleMapper - Class in com.atlassian.seraph.auth

Provides a simple base implementation of RoleMapper.

SimpleAbstractRoleMapper() - Constructor for class com.atlassian.seraph.auth.SimpleAbstractRoleMapper

stampRequestResponse(HttpServletRequest, HttpServletResponse) - Method in enum com.atlassian.seraph.auth.LoginReason

This will stamp an attribute to the request called "com.atlassian.seraph.auth.LoginReason" to the toString() of the enum and will also add an "X-Seraph-LoginReason" to this value

STORAGE_KEY - Static variable in interface com.atlassian.seraph.config.SecurityConfig

T

toString() - Method in class com.atlassian.seraph.util.CachedPathMapper

toString() - Method in class com.atlassian.seraph.util.PathMapper

TWO_WEEKS - Static variable in class com.atlassian.seraph.service.rememberme.DefaultRememberMeConfiguration

U

UserPassCredentials(String, String) - Constructor for class com.atlassian.seraph.util.SecurityUtils.UserPassCredentials

UserPasswordPair(String, String, boolean) - Constructor for class com.atlassian.seraph.filter.PasswordBasedLoginFilter.UserPasswordPair

V

valueOf(String) - Static method in enum com.atlassian.seraph.auth.AuthenticationErrorType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.seraph.auth.AuthType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum com.atlassian.seraph.auth.LoginReason

Returns the enum constant of this type with the specified name.

values() - Static method in enum com.atlassian.seraph.auth.AuthenticationErrorType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.seraph.auth.AuthType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum com.atlassian.seraph.auth.LoginReason

Returns an array containing the constants of this enum type, in the order they are declared.

W

WebworkService - Class in com.atlassian.seraph.service

Configures Seraph based on WebWork 1.x configuration file actions.xml.

WebworkService() - Constructor for class com.atlassian.seraph.service.WebworkService

X

X_SERAPH_LOGIN_REASON - Static variable in enum com.atlassian.seraph.auth.LoginReason

The name of the Header set by Seraph to indicate how the login process went

XMLUtils - Class in com.atlassian.seraph.util

Some basic XML utility methods used by Seraph.

XMLUtils() - Constructor for class com.atlassian.seraph.util.XMLUtils

A B C D E F G H I L N O P R S T U V W X