com.neurosys.security.auth.domain

Interface UnTurstedAuthenticationToken

All Superinterfaces:

AuthenticationToken, Serializable

All Known Implementing Classes:

BasicUnTrustedAuthenticationToken

public interface UnTurstedAuthenticationToken
extends AuthenticationToken

Post Authentication, the result is an UnTurstedAuthenticationToken.
It carries details of codes that do not reveal information about the user but just enough to allow the API using this token to grant any further access or deny it.

This is useful when we can say what roles etc it has, but additionally need to pass the code for the calling external API to trust it and believe it is what it says it is. In a way this is a Principal, though we have kept Principal strictly for credential business.

Author:

Arjun Dhar

See Also:

Principal, AuthenticationToken

Method Summary

Modifier and Type	Method and Description
String	getCode() A GUID of sorts that is secret and only the calling API would know and be able to trust if it matches.

Methods inherited from interface com.neurosys.security.auth.domain.AuthenticationToken

getRoles, getUserId, isAuthenticated

Method Detail

getCode

String getCode()

A GUID of sorts that is secret and only the calling API would know and be able to trust if it matches.