org.ow2.proactive.resourcemanager.authentication

Class RMKeycloakLoginModule

java.lang.Object

org.ow2.proactive.authentication.FileLoginModule

org.ow2.proactive.authentication.KeycloakLoginModule

org.ow2.proactive.resourcemanager.authentication.RMKeycloakLoginModule

All Implemented Interfaces:

LoginModule, Loggable

public class RMKeycloakLoginModule
extends KeycloakLoginModule

RM login module that performs user authentication and authorization against Keycloak. It loads Keycloak configuration from the file config/keycloak.cfg. It extends KeycloakLoginModule to perform user authentication and authorization.

Since:

ProActive Scheduling 14.0

Field Summary

Fields inherited from class org.ow2.proactive.authentication.FileLoginModule

callbackHandler, ENCRYPTED_DATA_SEP, groupFile, loginFile, subject, tenantFile

Constructor Summary

Constructors

Constructor and Description
RMKeycloakLoginModule()

Method Summary

Modifier and Type	Method and Description
protected Set<String>	getConfiguredDomains()
protected String	getGroupFileName() Returns group file name from scheduler configuration file Used for group membership verification fall-back.
protected String	getKeycloakConfigFileName() Returns Keycloak configuration file name defined in scheduler configuration file
org.apache.log4j.Logger	getLogger() Returns logger for authentication
protected String	getLoginFileName() Returns login file name from scheduler configuration file Used for authentication fall-back
protected PrivateKey	getPrivateKey() Defines private key
protected String	getTenantFileName() Returns tenant file name from scheduler configuration file
protected boolean	isLegacyPasswordEncryption() Returns true if legacy password encryption is used (hybrid symetric key).

Methods inherited from class org.ow2.proactive.authentication.KeycloakLoginModule

abort, commit, initialize, login, logout, parseAccessTokenResponse

Methods inherited from class org.ow2.proactive.authentication.FileLoginModule

checkGroupFile, checkLoginFile, checkTenantFile, groupMembershipFromFile, logUser, removeOldFailedAttempts, resetFailedAttempt, retryInHowManyMinutes, storeFailedAttempt, tenantMembershipFromFile, tooManyFailedAttempts

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RMKeycloakLoginModule

public RMKeycloakLoginModule()

Method Detail

getKeycloakConfigFileName

protected String getKeycloakConfigFileName()

Returns Keycloak configuration file name defined in scheduler configuration file

Specified by:

getKeycloakConfigFileName in class KeycloakLoginModule

Returns:

Keycloak configuration file name defined in scheduler configuration file

getLoginFileName

protected String getLoginFileName()

Returns login file name from scheduler configuration file Used for authentication fall-back

Specified by:

getLoginFileName in class FileLoginModule

Returns:

login file name from scheduler configuration file

getGroupFileName

protected String getGroupFileName()

Returns group file name from scheduler configuration file Used for group membership verification fall-back.

Specified by:

getGroupFileName in class FileLoginModule

Returns:

group file name from scheduler configuration file

getTenantFileName

protected String getTenantFileName()

Returns tenant file name from scheduler configuration file

Specified by:

getTenantFileName in class FileLoginModule

Returns:

tenant file name from scheduler configuration file

getConfiguredDomains

protected Set<String> getConfiguredDomains()

Specified by:

getConfiguredDomains in class FileLoginModule

getPrivateKey

protected PrivateKey getPrivateKey()
                            throws KeyException

Description copied from class: FileLoginModule

Defines private key

Specified by:

getPrivateKey in class FileLoginModule

Returns:

private key in use

Throws:

KeyException

isLegacyPasswordEncryption

protected boolean isLegacyPasswordEncryption()

Description copied from class: FileLoginModule

Returns true if legacy password encryption is used (hybrid symetric key). Returns false if newer encryption is used (hash/salt based)

Specified by:

isLegacyPasswordEncryption in class FileLoginModule

Returns:

getLogger

public org.apache.log4j.Logger getLogger()

Returns logger for authentication

Returns:

logger for authentication