Package com.inductiveautomation.ignition.gateway.authentication.impl

Class InternalUserSource

java.lang.Object

com.inductiveautomation.ignition.gateway.user.UserSourceProfileKernelWrapper

com.inductiveautomation.ignition.gateway.user.AbstractUserSourceProfile

com.inductiveautomation.ignition.gateway.authentication.impl.InternalUserSource

All Implemented Interfaces:

UserSourceProfile, UserSourceProfileKernel

Direct Known Subclasses:

ADInternalHybridUserSource

public class InternalUserSource
extends AbstractUserSourceProfile

This user source stores users, roles, extended properties, and contact info inside the internal database. It is fully compliant with the user-source editing capabilities of Ignition.

Field Summary

Fields inherited from interface com.inductiveautomation.ignition.gateway.user.UserSourceProfile

IDENTIFIER_MDC_KEY

Constructor Summary

Constructors

Constructor	Description
InternalUserSource(UserSourceProfileKernel delegate)
InternalUserSource(UserSourceProfileKernel kernel, int pwdHistory, int pwdMinLength, int pwdComplexity, int pwdMaxAge, boolean pwdContainsPassword, boolean pwdContainsUserName, int pwdMaxRepeatedChars)

Method Summary

Modifier and Type	Method	Description
void	addRole(Role role, UICallback ui)
void	addUser(User user, UICallback ui)
protected void	addUserInternal(User user, UICallback ui)
void	alterPassword(User user, String oldPassword, String newPassword)
void	alterRole(Role role, UICallback ui)
void	alterUser(User user, UICallback ui)
AuthenticatedUser	authenticate(AuthChallenge challenge)	Called to both verify authentication for a given username/password pair, and to find the security roles for that user.
Optional<InternalUserResource>	findInternalUser(String uname)	Looks up the internal user record keyed on username, NOT case-sensitive
protected String	findUserInternalId(User user)	Find the internal ID of the user.
protected String	generateUuid()	Generate a UUID for an InternalUserResource.
Set<UserSourceEditCapability>	getEditFlags()	Which of the editing functions are supported?
Collection<Role>	getRoles()
Optional<User>	getUser(String userName)	Fetch a User with the given user name.
Collection<User>	getUsers()	Retrieve all users from this profile.
void	removeRole(Role role, UICallback ui)
void	removeUser(User user, UICallback ui)
protected String	selectInternalUserId(InternalUserResource internalUser)	Select the internal user ID from the InternalUserResource.
String	toString()
String	validatePassword(User user, String password)	Validate the given password.

Methods inherited from class com.inductiveautomation.ignition.gateway.user.AbstractUserSourceProfile

getName, getRoles, getUser, getUsers

Methods inherited from class com.inductiveautomation.ignition.gateway.user.UserSourceProfileKernelWrapper

getCacheValidationTimeout, getContext, getManager, getProfileName, isLockedOut, notifyFailedAttempt, shutdown, startup

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface com.inductiveautomation.ignition.gateway.user.UserSourceProfile

getCacheValidationTimeout, shutdown, startup

Constructor Details

InternalUserSource

public InternalUserSource(UserSourceProfileKernel delegate)

InternalUserSource

public InternalUserSource(UserSourceProfileKernel kernel,
 int pwdHistory,
 int pwdMinLength,
 int pwdComplexity,
 int pwdMaxAge,
 boolean pwdContainsPassword,
 boolean pwdContainsUserName,
 int pwdMaxRepeatedChars)

Method Details

authenticate

public AuthenticatedUser authenticate(AuthChallenge challenge)
                               throws Exception

Description copied from interface: UserSourceProfile

Called to both verify authentication for a given username/password pair, and to find the security roles for that user.

Returns:

An AuthenticatedUser that contains the user's roles if authentication succeeded, or null if it did not.

Throws:

PasswordExpiredException - if the user's password has expired and must be reset

Exception - if there was an unexpected problem encountered during authentication

getUsers

@Nonnull
public Collection<User> getUsers()
                          throws Exception

Description copied from interface: UserSourceProfile

Retrieve all users from this profile. This can execute slowly (block) if need be. It will be called periodically by the manager and the results will be cached. Users from failover sources will be returned if hard failover is configured and triggered.

Specified by:

getUsers in interface UserSourceProfile

Specified by:

getUsers in class AbstractUserSourceProfile

Throws:

Exception

findInternalUser

@Nonnull
public Optional<InternalUserResource> findInternalUser(String uname)

Looks up the internal user record keyed on username, NOT case-sensitive

getUser

@Nonnull
public Optional<User> getUser(String userName)
                       throws Exception

Description copied from interface: UserSourceProfile

Fetch a User with the given user name. If more than one user exists with the given user name, the first user returned from the underlying data source is returned. Failover sources will be queried if hard failover is configured and the primary sources are unable to fetch the user due to an error. Failover sources will also be queried if soft failover is configured and the user is not found in the primary sources.

Specified by:

getUser in interface UserSourceProfile

Overrides:

getUser in class AbstractUserSourceProfile

Parameters:

userName - the user name of the User to fetch

Returns:

an Optional User with the given user name. the user may be from a failover user source (check User.getProfileName() to confirm)

Throws:

Exception - if there is an unexpected problem fetching the user with the given user name

See Also:

• UserSourceProfile.getUser(String, String)

getRoles

@Nonnull
public Collection<Role> getRoles()
                          throws Exception

Specified by:

getRoles in interface UserSourceProfile

Specified by:

getRoles in class AbstractUserSourceProfile

Returns:

a collection of all possible roles for this profile. May be empty. Roles from failover sources will be returned if hard failover is configured and triggered.

Throws:

Exception

toString

public String toString()

Overrides:

toString in class Object

getEditFlags

public Set<UserSourceEditCapability> getEditFlags()

Description copied from interface: UserSourceProfile

Which of the editing functions are supported?

Specified by:

getEditFlags in interface UserSourceProfile

Overrides:

getEditFlags in class AbstractUserSourceProfile

validatePassword

public String validatePassword(@Nonnull
 User user,
 String password)

Description copied from interface: UserSourceProfile

Validate the given password. Note that this doesn't mean it checks to see if this password matches the user's current password. Rather, it means that this password would be an acceptable new password for the user.

Returns:

A i18n key for the error message describing why the password is invalid, or null if the password is valid.

addUserInternal

protected void addUserInternal(User user,
 @Nullable
 UICallback ui)
                        throws Exception

Throws:

Exception

generateUuid

protected String generateUuid()

Generate a UUID for an InternalUserResource.

Returns:

A UUID string or null if no UUID is generated.

selectInternalUserId

protected String selectInternalUserId(InternalUserResource internalUser)

Select the internal user ID from the InternalUserResource.

Parameters:

internalUser - The internal user resource to get the ID of.

Returns:

The ID of the internal user.

addUser

public void addUser(@Nonnull
 User user,
 UICallback ui)
             throws Exception

Specified by:

addUser in interface UserSourceProfile

Overrides:

addUser in class AbstractUserSourceProfile

Throws:

Exception

findUserInternalId

protected String findUserInternalId(User user)

Find the internal ID of the user. This is used to identify the user in the JSON resource.

Parameters:

user - The user to find the ID for.

Returns:

The internal ID of the user.

alterPassword

public void alterPassword(User user,
 String oldPassword,
 String newPassword)
                   throws Exception

Specified by:

alterPassword in interface UserSourceProfile

Overrides:

alterPassword in class AbstractUserSourceProfile

Throws:

Exception

alterUser

public void alterUser(User user,
 UICallback ui)
               throws Exception

Specified by:

alterUser in interface UserSourceProfile

Overrides:

alterUser in class AbstractUserSourceProfile

Throws:

Exception

removeUser

public void removeUser(User user,
 UICallback ui)
                throws Exception

Specified by:

removeUser in interface UserSourceProfile

Overrides:

removeUser in class AbstractUserSourceProfile

Throws:

Exception

addRole

public void addRole(Role role,
 UICallback ui)

Specified by:

addRole in interface UserSourceProfile

Overrides:

addRole in class AbstractUserSourceProfile

alterRole

public void alterRole(Role role,
 UICallback ui)

Specified by:

alterRole in interface UserSourceProfile

Overrides:

alterRole in class AbstractUserSourceProfile

removeRole

public void removeRole(Role role,
 UICallback ui)
                throws Exception

Specified by:

removeRole in interface UserSourceProfile

Overrides:

removeRole in class AbstractUserSourceProfile

Throws:

Exception