com.ibm.websphere.objectgrid.security.plugins.builtins
Class WSSubjectValidationImpl

java.lang.Object
  com.ibm.websphere.objectgrid.security.plugins.builtins.WSSubjectValidationImpl

All Implemented Interfaces:

SubjectValidation

public class WSSubjectValidationImpl
extends java.lang.Object
implements SubjectValidation

This class is an implementation of the SubjectValidation interface in a WebSphere Application Server environment.

A typical scenario of using this class is described as below:

• The client has already been authenticated to WAS before it accesses ObjectGrid.
• The client is running locally on the ObjectGrid server side.
• The client retrieves the runAs Subject from the thread and passes the subject to ObjectGrid server.
• The ObjectGrid runtime will call the validateSubject(Subject) method to validate the subject has not been tampered with.

Here is the code sample:

 //get the subject from the thread 
 Subject subject = com.ibm.websphere.security.auth.WSSubject.getRunAsSubject();
 
 // use the subject to get a Session object 
 Session session = objectgrid.getSession(subject);
 

Since:

WAS XD 6.0

See Also:

InvalidSubjectException, SubjectValidation

Constructor Summary

WSSubjectValidationImpl()
Creates a new WSSubjectValidationImpl

Method Summary

javax.security.auth.Subject

validateSubject(javax.security.auth.Subject subject) Validates that the subject has not been tampered with.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WSSubjectValidationImpl

public WSSubjectValidationImpl()

Creates a new WSSubjectValidationImpl

Method Detail

validateSubject

public javax.security.auth.Subject validateSubject(javax.security.auth.Subject subject)
                                            throws InvalidSubjectException

Validates that the subject has not been tampered with.

Specified by:

validateSubject in interface SubjectValidation

Parameters:

subject - a Subject to be validated

Returns:

the validated Subject object

Throws:

InvalidSubjectException - if the subject is invalid

See Also:

SubjectValidation.validateSubject(Subject)