All Classes and Interfaces
Class
Description
An access control entry, which has an identity, a permit/deny access
flag, and a set of operation labels that are specific to the service
that owns the ACL.
ACL entry permission; permit or deny
An access control list, which has an owner and an ordered list of ACL entries.
A database view for access queries.
An ACL checker for convenience
An API key has a key string, a secret string, and an associated user.
Web systems implementing RESTful APIs with API keys can use this helper class to
read API key authentication info from the inbound request.
Web systems implementing RESTful APIs with basic auth can use this helper class to
get credentials from the inbound request.
Creates a service object to wrap an IAM manager implementation
CommonJsonDb manages identity related objects that are serialized in JSON
A group of users
An abstraction of a request header in order to minimize dependence on
a particular HTTP server implementation.
An IAM DB implements all facets of identity and access management.
Identity and access lookup interface, planned for "lookups" rather than
the management of identity, groups, access, etc.
A combined interface for user/group/tag management.
An exception that signals service failure (as opposed to access denied, etc.)
An identity (user) in this system.
An identity database, mainly for authenticating users.
This interface to the database allows the caller to make changes to identity
information, like creating users, enabling/disabling users, etc.
A userId string can be any value suitable to the application, such as email address or UUID.
A userId string can be any value suitable to the application, such as email address or UUID.
This "database" is a single JSON document.
A JWT credential.
An interface for validating JWOT tokens
A protected resource is a resource that carries its own ACL.
A resource is a general thing that can be identified by an ID.
This service is provided for test.
Tags are randomized strings that are used to generate text that would be improbable
for attackers to guess.
A container for user-oriented data.
A username and password credential.